CRITICAL9.8npmGHSA-2xx6-qf7x-grqh· CVE-2025-63706next-npm-version is vulnerable to Command injectionModified: 5/12/2026