4 min read
Security Lessons: Why Your Node.js Apps Are Probably Exposed
A post-incident writeup from a real production security audit. We discovered all our Next.js apps were directly accessible from the internet, bypassing Nginx entirely. Here's what we learned.