react-CVE-2025-55182-fixer

React Server Components 安全 PR 自动化 此仓库提供了一个脚本，用于自动升级并创建拉取请求 PR ，以修复受 CVE-2025-55182 影响的仓库。该漏洞影响易受攻击版本的 react-server-dom- 及相关的 React 包。 这个工具有什么用？ 扫描仓库 package.json 中受影响的 react-server-dom-、react、react-dom 和 next 版本。 如有必要，将其升级到安全的修复版本。 在目标仓库中创建一个包含更新依赖项的 PR。 支持直接仓库和 fork。 为什么需要这个？ React Server...

React-site-CVE-2025-55182

React Site - CVE-2025-55182 README: Proyecto Next.js vulnerable landing React RSC Este repositorio contiene un ejemplo de un landing corporativo multi-página en Next.js 15.0.0 + React 19.0.0. El sitio simula una estructura como t1.ru: inicio, productos, casos, medios, sobre la empresa, contacto...

CVE-2025-55182

CVE-2025-55182 Aplicación Vulnerable Construir y ejecutar: docker compose build docker compose run --rm --entrypoint 'npm install' node docker compose run --rm --entrypoint 'npm run build' node docker compose up POC de https://github.com/msanft/CVE-2025-55182: node poc.js Experimentación con...

React2Shell_cve-2025-55182

React Server Components RCE - CVE-2025-55182 ¡Hola! ¡Espero que estés teniendo un gran día! 😊✨ ¿De qué trata esto? Las versiones 19.0.0 , 19.1.0 , 19.1.1 y 19.2.0 de React Server Components tienen un grave problema de seguridad. Los paquetes react-server-dom-parcel, react-server-dom-turbopack y...

cve-2025-55182-checker

CVE-2025-55182 检查器 一个便携式 Bash 脚本，用于检测受 CVE-2025-55182 影响的 React Server DOM 和 Next.js 包的易受攻击版本。 功能特性 递归扫描项目中的所有 package.json 文件。 检测以下包的易受攻击版本： react-server-dom-（19.0.0、19.1.0、19.1.1、19.2.0） next（=15.0.4、=15.1.8、=15.2.5、=15.3.5、=15.4.7、=15.5.6、=16.0.6） Canary 构建版本 14.3.0-canary.77 及更高版本...

React2Shell_Rce-cve-2025-55182

React Server Components RCE – README ¡Buen día! De verdad espero que todo sea increíble de tu lado de la pantalla. 😊✨ Descripción Las versiones 19.0.0 , 19.1.0 , 19.1.1 y 19.2.0 de React Server Components, incluidas react-server-dom-parcel, react-server-dom-turbopack y react-server-dom-webpack,...

React2Shell-CVE-2025-55182

🎯 React2Shell CVE-2025-55182: 从 React Server Components 到完全 RCE 难度： 中级 → 高级 类别： Web 漏洞利用 | 反序列化 | RCE 🧩 任务 1: 简介 — 为什么 React2Shell 是个大事 CVE-2025-55182，绰号 React2Shell ，是那种让防御者立即感到紧张 😬 的漏洞之一。它于 2025 年 12 月 被发现，CVSS 评分为 10.0 ，这已经告诉你这不是某种边缘情况的 bug。 其核心是，这个漏洞影响 React Server Components RSC...

K000163005: react-server-dom vulnerability CVE-2026-23870

Security Advisory Description A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to server crashes, out-of-memory exceptions or excessive CPU usage; affecting the following packages: react-server-dom-webpac...

NPM: react-server-dom: Denial of Service in Server Functions

NPM: react-server-dom: Denial of Service in Server Functions vulnerability discovered by ? in WordPress Npm react-server-dom-turbopack versions = 19.0.0, 19.0.8...

NPM: react-server-dom: Denial of Service in Server Functions

NPM: react-server-dom: Denial of Service in Server Functions vulnerability discovered by ? in WordPress Npm react-server-dom-webpack versions = 19.0.0, 19.0.8...

@amazeelabs/bridge-waku (>=1.1.0, <=2.0.1), @amazeelabs/executors (>=3.0.0, <=3.1.14) +52 more potentially affected by CVE-2026-44907 via react-server-dom-webpack (>=19.0.0, <=19.0.1)

react-server-dom-webpack NPM version =19.0.0, =1.1.0, =3.0.0, =1.1.0, =1.1.0, =1.0.0-canary.12245, =0.9.1-next.19, =1.0.0-canary.12245, =0.9.1-next.19, =1.0.0-canary.12245, =1.0.0-canary.12245, =1.0.0-canary.12245, =0.9.1-next.19, =1.0.0-canary.12245, =1.0.0-canary.12245, =0.0.4, =2.0.3-next.0 an...

react-server-dom: Denial of Service in Server Functions

Impact A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to out-of-memory exceptions or excessive CPU usage. We recommend updating immediately. The vulnerability exists in versions 19.0.0 through 19.0.7,...

NPM: react-server-dom: Denial of Service in Server Functions

NPM: react-server-dom: Denial of Service in Server Functions vulnerability discovered by ? in WordPress Npm react-server-dom-parcel versions = 19.1.0, 19.1.9...

@amazeelabs/bridge-waku (>=1.1.0, <=2.0.1), @amazeelabs/executors (>=3.0.0, <=3.1.14) +52 more potentially affected by CVE-2026-44907 via react-server-dom-webpack (>=19.0.0, <=19.0.1)

react-server-dom-webpack NPM version =19.0.0, =1.1.0, =3.0.0, =1.1.0, =1.1.0, =1.0.0-canary.12245, =0.9.1-next.19, =1.0.0-canary.12245, =0.9.1-next.19, =1.0.0-canary.12245, =1.0.0-canary.12245, =1.0.0-canary.12245, =0.9.1-next.19, =1.0.0-canary.12245, =1.0.0-canary.12245, =0.0.4, =2.0.3-next.0 an...

EUVD-2026-46307

react-server-dom: Denial of Service in Server Functions...

GHSA-WX67-QW84-CM4G react-server-dom: Denial of Service in Server Functions

Impact A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to out-of-memory exceptions or excessive CPU usage. We recommend updating immediately. The vulnerability exists in versions 19.0.0 through 19.0.7,...

CVE-2026-44907

A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to excessive CPU usage; affecting the following packages: react-server-dom-webpack, react-server-dom-parcel, react-server-dom-turbopack versions 19.0.0...

CVE-2026-44907

A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to excessive CPU usage; affecting the following packages: react-server-dom-webpack, react-server-dom-parcel, react-server-dom-turbopack versions 19.0.0...

CVE-2026-44907: Undefined Security Weakness

A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to excessive CPU usage; affecting the following packages: react-server-dom-webpack, react-server-dom-parcel, react-server-dom-turbopack versions 19.0.0...

CVE-2026-23870

A flaw was found in the React Server DOM components, including react-server-dom-webpack, react-server-dom-parcel, and react-server-dom-turbopack. A remote attacker could exploit this denial of service DoS vulnerability by sending specially crafted HTTP requests to server function endpoints. This...