CVE-2021-37699

score

<0.1

cvss

6.9

epss

1.0%

published

2021-08-12

kev added

—

first seen

2026-10-21

Next.js versions with static generation of pages/_error.js contain an open redirect caused by encoded paths, letting attackers redirect users to external sites, exploit requires the affected version.