Skip to content

Vulnerabilities of Meta react-server-dom-webpack

Is your version affected?

CVE Summary Score Published
CVE-2026-44907 A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function… 7.5 High Jul 21, 2026
CVE-2026-23870 A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function… 7.5 High May 6, 2026
CVE-2026-23869 A denial of service vulnerability exists in React Server Components, affecting the following packages:… 7.5 High Apr 8, 2026
CVE-2026-23864 Multiple denial of service vulnerabilities exist in React Server Components, affecting the following packages:… 7.5 High Jan 26, 2026
CVE-2025-67779 It was found that the fix addressing CVE-2025-55184 in React Server Components was incomplete and does not prevent a… 7.5 High Dec 11, 2025
CVE-2025-55184 A pre-authentication denial of service vulnerability exists in React Server Components versions 19.0.0, 19.0.1 19.1.0,… 7.5 High Dec 11, 2025
CVE-2025-55183 An information leak vulnerability exists in specific configurations of React Server Components versions 19.0.0, 19.0.1… 5.3 Medium Dec 11, 2025
CVE-2025-55182 Exploited Meta React Server Components Remote Code Execution Vulnerability 10.0 Critical Dec 3, 2025

Other Meta products