What are the primary vulnerabilities associated with Cloudflare Next.js on Pages deployments?

Common vulnerabilities include Server-Side Rendering (SSR) misconfigurations leading to data exposure, insufficient input validation in API routes causing injection attacks (e.g., XSS, SQLi), and improper handling of secrets and environment variables. Also, outdated dependencies within the Next.js project itself can introduce vulnerabilities. Finally, misconfigured CORS policies can expose APIs to unauthorized access.