Authentication bypass bug in Nextauth.js could allow email account takeover | Heykuki News