CVE-2022-21721

score

<0.1

cvss

5.9

epss

2.2%

published

2022-01-28

kev added

—

first seen

2026-10-21

Next.js versions 12.0.0 to less than 12.0.9 contain a denial of service caused by vulnerable i18n code, letting attackers trigger DoS attacks when using next start or a custom server with built-in i18n support, exploit requires use of these features and unfiltered requests.