19 Aug 2026Cross-Session Session Leakage Through Cached Next.js ResponsesHow a shared CloudFront cache exposed an HttpOnly session credential embedded in server-rendered Next.js responses.WebNext.jsCloudFrontSession ManagementCDNInformation Disclosure