New deployments of vulnerable Next.js applications are now blocked by defaultTom Knickman, Luke Phillips-Sheard