CVE-2021-43803

Name of the Vulnerable Software and Affected Versions: Next.js versions prior to 12.0.5 Next.js versions prior to 11.1.3

Description: The issue arises when invalid or malformed URLs are processed, potentially leading to a server crash. This can occur in deployments using Next.js versions above 11.1.0 and below 12.0.5, Node.js above 15.0.0, and next start or a custom server. However, deployments on Vercel and similar environments where invalid requests are filtered before reaching Next.js are not affected.

Recommendations: For Next.js versions prior to 12.0.5, update to version 12.0.5 or later to resolve the issue. For Next.js versions prior to 11.1.3, update to version 11.1.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the server or implementing filtering for invalid requests to minimize the risk of exploitation.