All vulnerabilities

npm

CVE-2022-21721

Denial of Service Vulnerability in next.js

Severity
Medium 5.9
Published
28 Jan 2022
Last changed
10 Sept 2026
Added to UpHeron
14 Oct 2026
Fixed in
12.0.9
Also known as
GHSA-wr66-vrwm-5g5x
Sources
OSV.dev and GitHub

Affected software

SoftwareAffected versions
Next.jsnpm · osv:npm:next
  • From 12.0.0 before 12.0.9

References