Lucene search
+L

691 matches found

RedhatCVE
RedhatCVE
•added 2026/01/28 3:18 p.m.•13 views

CVE-2026-23864

A flaw was found in React Server Components. A remote attacker can exploit this vulnerability by sending specially crafted HTTP requests to Server Function endpoints. This can lead to a Denial of Service DoS, causing server crashes, out-of-memory exceptions, or excessive CPU usage, thereby...

7.5CVSS7.6AI score0.02581EPSS
SaveExploits0References5
GithubExploit
GithubExploit
•added 2026/01/27 10:06 a.m.•181 views

Exploit for Deserialization of Untrusted Data in Facebook React

!Image Althttps://github.com/AsadAhmad-1337/React-2-Shell/blo...

10CVSS8AI score0.99802EPSS
SaveExploits395
F5 Networks
F5 Networks
•added 2026/01/27 2:09 a.m.•32 views

K000159700: React framework vulnerability CVE-2026-23864

Security Advisory Description Multiple denial of service vulnerabilities exist in React Server Components, affecting the following packages: react-server-dom-parcel, react-server-dom-turbopack, react-server-dom-webpack. The vulnerabilities are triggered by sending specially crafted HTTP requests ...

7.5CVSS7.3AI score0.02581EPSS
SaveExploits0
NVD
NVD
•added 2026/01/26 8:16 p.m.•20 views

CVE-2026-23864

Multiple denial of service vulnerabilities exist in React Server Components, affecting the following packages: react-server-dom-parcel, react-server-dom-turbopack, react-server-dom-webpack. The vulnerabilities are triggered by sending specially crafted HTTP requests to Server Function endpoints,...

7.5CVSS0.02581EPSS
SaveExploits0References6
Snyk
Snyk
•added 2026/01/26 7:49 p.m.•18 views

Allocation of Resources Without Limits or Throttling

Overview react-server-dom-webpack is a React Server Components bindings for DOM using Webpack. This is intended to be integrated into meta-frameworks. It is not intended to be imported directly. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttli...

8.7CVSS7.5AI score0.66882EPSS
SaveExploits10References2
Snyk
Snyk
•added 2026/01/26 7:49 p.m.•22 views

Allocation of Resources Without Limits or Throttling

Overview next is a react framework. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the decoding reply functions of React Flight protocol. An attacker can cause server crashes, out-of-memory exceptions, or excessive CPU usage by sending...

8.7CVSS7.6AI score0.66882EPSS
SaveExploits10References2
attackerkb
attackerkb
•added 2026/01/26 7:16 p.m.•16 views

CVE-2026-23864

Multiple denial of service vulnerabilities exist in React Server Components, affecting the following packages: react-server-dom-parcel, react-server-dom-turbopack, react-server-dom-webpack. The vulnerabilities are triggered by sending specially crafted HTTP requests to Server Function endpoints,...

7.5CVSS6AI score0.02581EPSS
SaveExploits0References2Affected Software3
CVE
CVE
•added 2026/01/26 7:16 p.m.•204 views

CVE-2026-23864

Multiple denial of service vulnerabilities exist in React Server Components , specifically affecting the packages react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack. The flaws are triggered by sending specially crafted HTTP requests to Server Function endpoints. The...

7.5CVSS7.4AI score0.02581EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
•added 2026/01/26 7:16 p.m.•39 views

CVE-2026-23864

Multiple denial of service vulnerabilities exist in React Server Components, affecting the following packages: react-server-dom-parcel, react-server-dom-turbopack, react-server-dom-webpack. The vulnerabilities are triggered by sending specially crafted HTTP requests to Server Function endpoints,...

0.02581EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/26 7:16 p.m.•5 views

CVE-2026-23864

Multiple denial of service vulnerabilities exist in React Server Components, affecting the following packages: react-server-dom-parcel, react-server-dom-turbopack, react-server-dom-webpack. The vulnerabilities are triggered by sending specially crafted HTTP requests to Server Function endpoints,...

7.4AI score0.02581EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2026/01/26 5:15 p.m.•194 views

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 React2Shell Vulnerability Target Vulnerab...

10CVSS7.8AI score0.99802EPSS
SaveExploits395
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/26 12:00 a.m.•3 views

CVE-2026-23864: Uncontrolled Resource Consumption

Multiple denial of service vulnerabilities exist in React Server Components, affecting the following packages: react-server-dom-parcel, react-server-dom-turbopack, react-server-dom-webpack. The vulnerabilities are triggered by sending specially crafted HTTP requests to Server Function endpoints,...

7.5CVSS7.3AI score0.02581EPSS
SaveExploits0References5
GithubExploit
GithubExploit
•added 2026/01/23 6:05 p.m.•242 views

Exploit for Deserialization of Untrusted Data in Facebook React

React2Shell PoC This repository provides a minimal intentiona...

10CVSS7.9AI score0.99802EPSS
SaveExploits409
GithubExploit
GithubExploit
•added 2026/01/23 10:36 a.m.•401 views

Exploit for Deserialization of Untrusted Data in Facebook React

🔍 Next.js Security Testing Tool Professiona...

10CVSS7.7AI score0.99802EPSS
SaveExploits395
GithubExploit
GithubExploit
•added 2026/01/10 3:58 a.m.•213 views

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 React2Shell Vulnerability Analysis Lab This...

10CVSS7.8AI score0.99802EPSS
SaveExploits395
GithubExploit
GithubExploit
•added 2026/01/08 10:46 a.m.•179 views

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 React2Shell - Proof of Concept ⚠️ SECURIT...

10CVSS8.2AI score0.99802EPSS
SaveExploits395
GithubExploit
GithubExploit
•added 2026/01/05 7:06 a.m.•189 views

Exploit for Deserialization of Untrusted Data in Facebook React

🔍 Next.js Security Testing Tool Professiona...

10CVSS7.7AI score0.99802EPSS
SaveExploits395
GithubExploit
GithubExploit
•added 2026/01/05 6:55 a.m.•158 views

Exploit for Deserialization of Untrusted Data in Facebook React

🔍 Next.js Security Testing Tool Professiona...

10CVSS7.7AI score0.99802EPSS
SaveExploits395
GithubExploit
GithubExploit
•added 2026/01/04 12:05 p.m.•196 views

Exploit for Deserialization of Untrusted Data in Facebook React

🎯 React2Shell CVE-2025-55182 — From React Server Components...

10CVSS7.7AI score0.99802EPSS
SaveExploits409
GithubExploit
GithubExploit
•added 2026/01/04 3:15 a.m.•238 views

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 React2Shell - Vulnerable Lab !CVE-2025-5518...

10CVSS8.1AI score0.99802EPSS
SaveExploits395
Rows per page
Query Builder