7.5
Élevée
CVE-2025-55184 A pre-authentication denial of service vulnerability exists in React Server Components versions 19.0.0, 19.0.1 19.1.0,…
Description
A pre-authentication denial of service vulnerability exists in React Server Components versions 19.0.0, 19.0.1 19.1.0, 19.1.1, 19.1.2, 19.2.0 and 19.2.1, including the following packages: react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack. The vulnerable code unsafely deserializes payloads from HTTP requests to Server Function endpoints, which can cause an infinite loop that hangs the server process and may prevent future HTTP requests from being served.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| react-server-dom-webpack 19.2 | 19.2.0 → 19.2.1 | Pas de correctif indiqué |
| react-server-dom-webpack 19.1 | 19.1.0 → 19.1.2 | Pas de correctif indiqué |
| react-server-dom-webpack 19.0 | 19.0.0 → 19.0.1 | Pas de correctif indiqué |
| react-server-dom-turbopack 19.2 | 19.2.0 → 19.2.1 | Pas de correctif indiqué |
| react-server-dom-turbopack 19.1 | 19.1.0 → 19.1.2 | Pas de correctif indiqué |
| react-server-dom-turbopack 19.0 | 19.0.0 → 19.0.1 | Pas de correctif indiqué |
| react-server-dom-parcel 19.2 | 19.2.0 → 19.2.1 | Pas de correctif indiqué |
| react-server-dom-parcel 19.1 | 19.1.0 → 19.1.2 | Pas de correctif indiqué |
| react-server-dom-parcel 19.0 | 19.0.0 → 19.0.1 | Pas de correctif indiqué |
Références
- www.facebook.com www.facebook.com
- react.dev react.dev
Chronologie
- Publiée
- Dernière modification
Autres CVE de react-server-dom-webpack
Les 8 CVE de react-server-dom-webpack →
CVE-2026-44907
A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function…
7.5
Élevée
CVE-2026-23870
A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function…
7.5
Élevée
CVE-2026-23869
A denial of service vulnerability exists in React Server Components, affecting the following packages:…
7.5
Élevée
CVE-2026-23864
Multiple denial of service vulnerabilities exist in React Server Components, affecting the following packages:…
7.5
Élevée