initial CL

Author: elithrar

src/content/changelog/workers/2025-03-22-next-js-vulnerability-waf.mdx

@@ -0,0 +1,14 @@
+---
+title: Managed WAF rule for Next.js vulnerability
+description: Automatic deployment of a Web Application Firewall rule to block requests that attempt to bypass authentication in Next.js applications as part of CVE-2025-29927.
+products:
+  - workers
+  - pages
+  - waf
+  - rules
+date: 2025-03-22T13:00:00Z
+---
+
+We've deployed a WAF (Web Application Firewall) rule to all sites to protect against the [Next.js authentication bypass vulnerability](https://github.com/advisories/GHSA-f82v-jwr5-mffw) (`CVE-2025-29927`) published on March 21st, 2025.
+
+TODO