onyx

onyx --cves cve-2021-43803

CVE-2021-43803

HIGHNext.js
score
<0.1
cvss
7.5
epss
47.3%
published
2021-12-10
kev added
—
first seen

Next.js versions prior to 12.0.5 or 11.1.3 contain a server crash caused by invalid or malformed URLs, affecting deployments with Node.js above 15.0.0 using next start or custom servers, exploit requires malformed URL requests.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

events2021-12-10 — PublishedP2026-10-21 — Tracked by OnyxTscore2026-10-21: score <0.1<0.1epss2026-09-22: epss 44.8%2026-09-23: epss 44.8%2026-09-24: epss 44.8%2026-09-25: epss 44.8%2026-09-26: epss 44.8%2026-09-27: epss 44.8%2026-09-28: epss 44.8%2026-09-29: epss 44.8%2026-09-30: epss 44.8%2026-10-01: epss 44.8%2026-10-02: epss 47.3%2026-10-03: epss 47.3%2026-10-04: epss 47.3%2026-10-05: epss 47.3%2026-10-06: epss 47.3%2026-10-07: epss 47.3%2026-10-08: epss 47.3%2026-10-09: epss 47.3%2026-10-10: epss 47.3%2026-10-11: epss 47.3%2026-10-12: epss 47.3%2026-10-13: epss 47.3%2026-10-14: epss 47.3%2026-10-15: epss 47.3%2026-10-16: epss 47.3%2026-10-18: epss 47.3%2026-10-19: epss 47.3%2026-10-20: epss 47.3%2026-10-21: epss 47.3%47.3%mentions/day0no mentions in 30 days2026-09-22today
  1. Published
  2. Tracked by Onyx

Weaknesses

CWE-20 NVD-CWE-noinfo

References 5