2 matches found
CVE-2025-67489
@vitejs/plugin-rs provides React Server Components RSC support for Vite. Versions 0.5.5 and below are vulnerable to arbitrary remote code execution on the development server through unsafe dynamic imports in server function APIs loadServerAction, decodeReply, decodeAction when integrated into RSC...
9.8CVSS6.5AI score0.00807EPSS
SaveExploits0References5
CVE-2025-67489: Improper Control of Generation of Code
@vitejs/plugin-rs provides React Server Components RSC support for Vite. Versions 0.5.5 and below are vulnerable to arbitrary remote code execution on the development server through unsafe dynamic imports in server function APIs loadServerAction, decodeReply, decodeAction when integrated into RSC...
9.8CVSS6.6AI score0.00807EPSS
SaveExploits0References2
20