CVE-2025-66478

CVE-2025-66478 describes an unauthenticated remote code execution vulnerability in React Server Components, affecting Next.js apps that use the App Router with React Server Components (including packages like react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack). The ...