Authentication bypass bug in Nextauth.js could allow email account takeoverportswigger.net4 pointsfeross4 years ago