{"action":"Upgrade next to 12.0.9 or later.","affected":[{"fixed":"12.0.9","introduced":"12.0.0"}],"component":"next","cve_ids":["CVE-2022-21721"],"ecosystem":"npm","epss":0.02153,"exploited":false,"fixed_versions":["12.0.9"],"ghsa_id":"GHSA-wr66-vrwm-5g5x","id":"tcs_01M5KGFVX4422WN3X6QC102F55","modified_at":"2026-09-10T03:49:11.471300399Z","published_at":"2022-01-28T23:09:22Z","references":["https://osv.dev/vulnerability/GHSA-wr66-vrwm-5g5x","https://github.com/vercel/next.js/security/advisories/GHSA-wr66-vrwm-5g5x","https://nvd.nist.gov/vuln/detail/CVE-2022-21721","https://github.com/vercel/next.js/pull/33503","https://github.com/vercel/next.js","https://github.com/vercel/next.js/releases/tag/v12.0.9"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-wr66-vrwm-5g5x","url":"https://osv.dev/vulnerability/GHSA-wr66-vrwm-5g5x"}],"summary":"Denial of Service Vulnerability in next.js"}