Fixing the Next.js React Flight Protocol RCE Vulnerability

How I discovered and patched a critical RCE vulnerability in Next.js 15.5.0-15.5.6 affecting this website. A practical case study in dependency security and incident response.