RCE Vulnerability in React and Next.js