Lucene search
+L

56 matches found

Patchstack
Patchstack
added 2026/07/24 9:12 p.m.14 views

NPM: react-server-dom: Denial of Service in Server Functions

NPM: react-server-dom: Denial of Service in Server Functions vulnerability discovered by ? in WordPress Npm react-server-dom-turbopack versions = 19.0.0, 19.0.8...

7.5CVSS5.8AI score0.00329EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2026/07/24 9:12 p.m.11 views

NPM: react-server-dom: Denial of Service in Server Functions

NPM: react-server-dom: Denial of Service in Server Functions vulnerability discovered by ? in WordPress Npm react-server-dom-webpack versions = 19.0.0, 19.0.8...

7.5CVSS5.8AI score0.00329EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2026/07/24 9:12 p.m.13 views

react-server-dom: Denial of Service in Server Functions

Impact A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to out-of-memory exceptions or excessive CPU usage. We recommend updating immediately. The vulnerability exists in versions 19.0.0 through 19.0.7,...

7.5CVSS5.9AI score0.00329EPSS
SaveExploits0References3Affected Software3
EUVD
EUVD
added 2026/07/24 9:12 p.m.14 views

EUVD-2026-46307

react-server-dom: Denial of Service in Server Functions...

7.5CVSS5.8AI score0.00329EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2026/07/24 9:12 p.m.12 views

NPM: react-server-dom: Denial of Service in Server Functions

NPM: react-server-dom: Denial of Service in Server Functions vulnerability discovered by ? in WordPress Npm react-server-dom-parcel versions = 19.1.0, 19.1.9...

7.5CVSS5.8AI score0.00329EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2026/07/24 9:12 p.m.14 views

GHSA-WX67-QW84-CM4G react-server-dom: Denial of Service in Server Functions

Impact A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to out-of-memory exceptions or excessive CPU usage. We recommend updating immediately. The vulnerability exists in versions 19.0.0 through 19.0.7,...

7.5CVSS5.9AI score0.00329EPSS
SaveExploits0References3
NVD
NVD
added 2026/07/21 5:17 p.m.12 views

CVE-2026-44907

A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to excessive CPU usage; affecting the following packages: react-server-dom-webpack, react-server-dom-parcel, react-server-dom-turbopack versions 19.0.0...

7.5CVSS0.00329EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/07/21 4:03 p.m.12 views

CVE-2026-44907

A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to excessive CPU usage; affecting the following packages: react-server-dom-webpack, react-server-dom-parcel, react-server-dom-turbopack versions 19.0.0...

7.5CVSS5.3AI score0.00329EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/05/29 12:30 p.m.23 views

CVE-2026-23870

A flaw was found in the React Server DOM components, including react-server-dom-webpack, react-server-dom-parcel, and react-server-dom-turbopack. A remote attacker could exploit this denial of service DoS vulnerability by sending specially crafted HTTP requests to server function endpoints. This...

7.5CVSS5.7AI score0.01533EPSS
SaveExploits1References4
Patchstack
Patchstack
added 2026/05/11 2:50 p.m.58 views

NPM: Facebook React has a Denial of Service Vulnerability in React Server Components

NPM: Facebook React has a Denial of Service Vulnerability in React Server Components discovered by ? in WordPress Npm react-server-dom-webpack versions = 19.0.0, 19.0.6...

7.5CVSS5.8AI score0.01533EPSS
SaveExploits1References5Affected Software1
Snyk
Snyk
added 2026/05/06 7:32 p.m.25 views

Allocation of Resources Without Limits or Throttling

Overview react-server-dom-webpack is a React Server Components bindings for DOM using Webpack. This is intended to be integrated into meta-frameworks. It is not intended to be imported directly. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttli...

8.7CVSS5.8AI score0.01533EPSS
SaveExploits1References2
Snyk
Snyk
added 2026/05/06 7:32 p.m.16 views

Allocation of Resources Without Limits or Throttling

Overview react-server-dom-parcel is a React Server Components bindings for DOM using Parcel. This is intended to be integrated into meta-frameworks. It is not intended to be imported directly. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling...

8.7CVSS5.8AI score0.01533EPSS
SaveExploits1References2
NVD
NVD
added 2026/05/06 5:16 p.m.28 views

CVE-2026-23870

A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to server crashes, out-of-memory exceptions or excessive CPU usage; affecting the following packages: react-server-dom-webpack, react-server-dom-parcel,...

7.5CVSS0.01533EPSS
SaveExploits1References1
OSV
OSV
added 2026/05/06 5:16 p.m.7 views

CVE-2026-23870

A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to server crashes, out-of-memory exceptions or excessive CPU usage; affecting the following packages: react-server-dom-webpack, react-server-dom-parcel,...

7.5CVSS5.9AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/06 4:24 p.m.11 views

CVE-2026-23870

A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to server crashes, out-of-memory exceptions or excessive CPU usage; affecting the following packages: react-server-dom-webpack, react-server-dom-parcel,...

7.5CVSS5.8AI score0.01533EPSS
SaveExploits1References2Affected Software3
VulnCheck KEV
VulnCheck KEV
added 2026/04/15 12:00 a.m.19 views

VulnCheck KEV: CVE-2025-55184

A pre-authentication denial of service vulnerability exists in React Server Components versions 19.0.0, 19.0.1 19.1.0, 19.1.1, 19.1.2, 19.2.0 and 19.2.1, including the following packages: react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack. The vulnerable code unsafe...

7.5CVSS5.9AI score0.67291EPSS
SaveIn wildExploits10References2
Github Security Blog
Github Security Blog
added 2026/04/10 3:35 p.m.18 views

React Server Components have a Denial of Service Vulnerability

Impact A denial of service vulnerability exists in React Server Components, affecting the following packages: react-server-dom-parcel, react-server-dom-turbopack, react-server-dom-webpack versions 19.0.0, 19.1.0 and 19.2.0. The vulnerability is triggered by sending specially crafted HTTP requests...

7.5CVSS5.8AI score0.01551EPSS
SaveExploits4References4Affected Software3
F5 Networks
F5 Networks
added 2026/04/09 9:43 a.m.20 views

K000160686: React framework vulnerability CVE-2026-23869

Security Advisory Description A denial of service vulnerability exists in React Server Components, affecting the following packages: react-server-dom-parcel, react-server-dom-turbopack and react-server-dom-webpack versions 19.0.0 through 19.0.4, 19.1.0 through 19.1.5, and 19.2.0 through 19.2.4. T...

7.5CVSS5.9AI score0.01551EPSS
SaveExploits4
OSV
OSV
added 2026/04/08 8:16 p.m.8 views

CVE-2026-23869

A denial of service vulnerability exists in React Server Components, affecting the following packages: react-server-dom-parcel, react-server-dom-turbopack and react-server-dom-webpack versions 19.0.0 through 19.0.4, 19.1.0 through 19.1.5, and 19.2.0 through 19.2.4. The vulnerability is triggered ...

7.5CVSS7.2AI score
SaveExploits0References4
NVD
NVD
added 2026/04/08 8:16 p.m.11 views

CVE-2026-23869

A denial of service vulnerability exists in React Server Components, affecting the following packages: react-server-dom-parcel, react-server-dom-turbopack and react-server-dom-webpack versions 19.0.0 through 19.0.4, 19.1.0 through 19.1.5, and 19.2.0 through 19.2.4. The vulnerability is triggered ...

7.5CVSS0.01551EPSS
SaveExploits4References4
Rows per page
Query Builder