10572 matches found
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 — React Server Components RCE | CTF Writeup...
Google Chrome PWA Install
The vulnerability of Google Chrome’s PWA components is related to access control errors. Exploiting this vulnerability allows a remote attacker to install arbitrary PWA applications...
[SECURITY] [DSA 6206-1] gdk-pixbuf security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6206-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 11, 2026 https://www.debian.org/security/faq -...
OESA-2026-1895 gdk-pixbuf2 security update
gdk is written in C but has been designed from the ground up to support a wide range of languages. It provide a complete set of widgets,and suitable for projects ranging from small one-off tools to complete application suites. Security Fixes: A flaw was found in the gdk-pixbuf library. This...
Exploit for CVE-2026-23869
⚡ CVE-2026-23869 — React2DoS Unauthenticated Remote Denial-o...
Exploit for CVE-2026-23869
⚡ CVE-2026-23869 — React2DoS Unauthenticated Remote Denial-o...
CVE-2026-33810 vulnerabilities
Vulnerabilities for packages: sftpgo-plugin-eventsearch, dkron, nova, dbmate, flux-notification-controller, envoy-ratelimit, clickhouse-operator, goreleaser, mountpoint-s3-csi-driver, temporal, omnibump, smarter-device-manager, metacontroller, flux-image-automation-controller, nodetaint,...
GHSA-M4PR-4J3G-9V7V vulnerabilities
Vulnerabilities for packages: hey, prometheus, mesosphere-vsphere-csi, aws-node-termination-handler, kubernetes-csi-node-driver-registrar, http-echo, opencost, mountpoint-s3-csi-driver, nri-nginx, goreleaser, step-issuer, pgtimetable, temporal, gitsign, migrate, node-problem-detector, wal-g,...
GHSA-GJVH-7JH8-7XHM vulnerabilities
Vulnerabilities for packages: hey, prometheus, mesosphere-vsphere-csi, aws-node-termination-handler, kubernetes-csi-node-driver-registrar, http-echo, opencost, mountpoint-s3-csi-driver, nri-nginx, goreleaser, step-issuer, pgtimetable, temporal, gitsign, migrate, node-problem-detector, wal-g,...
CVE-2026-27140 vulnerabilities
Vulnerabilities for packages: hey, prometheus, mesosphere-vsphere-csi, aws-node-termination-handler, kubernetes-csi-node-driver-registrar, http-echo, opencost, mountpoint-s3-csi-driver, nri-nginx, goreleaser, step-issuer, pgtimetable, temporal, iptables-wrappers, gitsign, migrate,...
GHSA-M4PR-4J3G-9V7V vulnerabilities
Vulnerabilities for packages: azure-workload-identity-webhook, s5cmd-fips, crossplane-provider-aws-kinesis-fips, datadog-operator-fips, kargo, kyverno-policy-reporter-ui, ko-fips, kube-state-metrics, amazon-eks-ami, gpu-operator-fips, jitsucom-bulker, mongodb-kubernetes-operator, traefik-fips,...
@vitejs/plugin-rsc has a Denial of Service with React Server Components
Impact @vitejs/plugin-rsc vendors react-server-dom-webpack, which contained a vulnerability in versions prior to 19.2.4. See details in React repository's advisory https://github.com/facebook/react/security/advisories/GHSA-479c-33wc-g2pg Patches Upgrade immediately to @vitejs/[email protected] or...
GHSA-V457-WXVJ-P9W9 @vitejs/plugin-rsc has a Denial of Service with React Server Components
Impact @vitejs/plugin-rsc vendors react-server-dom-webpack, which contained a vulnerability in versions prior to 19.2.4. See details in React repository's advisory https://github.com/facebook/react/security/advisories/GHSA-479c-33wc-g2pg Patches Upgrade immediately to @vitejs/[email protected] or...
Next.js has a Denial of Service with Server Components
A vulnerability affects certain React Server Components packages for versions 19.x and frameworks that use the affected packages, including Next.js 13.x, 14.x, 15.x, and 16.x using the App Router. The issue is tracked upstream as CVE-2026-23869. You can read more about this advisory our this...
GHSA-Q4GF-8MX6-V5V3 Next.js has a Denial of Service with Server Components
A vulnerability affects certain React Server Components packages for versions 19.x and frameworks that use the affected packages, including Next.js 13.x, 14.x, 15.x, and 16.x using the App Router. The issue is tracked upstream as CVE-2026-23869. You can read more about this advisory our this...
EUVD-2026-20584
React Server Components have a Denial of Service Vulnerability...
GHSA-479C-33WC-G2PG React Server Components have a Denial of Service Vulnerability
Impact A denial of service vulnerability exists in React Server Components, affecting the following packages: react-server-dom-parcel, react-server-dom-turbopack, react-server-dom-webpack versions 19.0.0, 19.1.0 and 19.2.0. The vulnerability is triggered by sending specially crafted HTTP requests...
Exploit for CVE-2026-23869
CVE-2026-23869 - Proof of Concept PoC Description This...
CVE-2026-35644 OpenClaw < 2026.3.22 - Credential Exposure via baseUrl Fields in Gateway Snapshots
OpenClaw before 2026.3.22 contains an information disclosure vulnerability that allows attackers with operator.read scope to expose credentials embedded in channel baseUrl and httpUrl fields. Attackers can access gateway snapshots via config.get and channels.status endpoints to retrieve sensitive...
React2DoS (CVE-2026-23869): When the Flight Protocol Crashes at Takeoff
Executive Summary In this article, we disclose a new high severity unauthenticated remote denial‑of‑service vulnerability we identified and reported in React Server Components that we’ve dubbed “React2DoS”. In this blog, we’ll analyze its impact and place it in the broader context of recently fou...