Denial Of Service (DoS)

🗓️ 13 Dec 2025 11:01:01Reported by Veracode Vulnerability DatabaseType

DoS in React Server Components due to unsafe payload deserialization on Server Function endpoints causing server halt.

Reporter	Title	Published	Views	Family All 33
GithubExploit	Exploit for CVE-2025-55183	15 Dec 202510:50	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Facebook React	12 Dec 202514:58	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Facebook React	14 Jan 202614:02	–	githubexploit
IBM Security Bulletins	Security Bulletin: Components with known vulnerabilities in IBM QRadar Pre-Validation App for IBM QRadar SIEM	2 Mar 202618:53	–	ibm
IBM Security Bulletins	Security Bulletin: User Entity Behavior Analytics app for IBM QRadar SIEM includes components with known vulnerabilities	19 Dec 202521:14	–	ibm
Circl	CVE-2025-67779	5 Dec 202513:54	–	circl
CNNVD	Meta React Server Components 安全漏洞	12 Dec 202500:00	–	cnnvd
CVE	CVE-2025-67779	11 Dec 202523:36	–	cve
Cvelist	CVE-2025-67779	11 Dec 202523:36	–	cvelist
EUVD	EUVD-2025-202926	12 Dec 202516:32	–	euvd

Vulners

Node

next nextMatch15.3.7js

next nextMatch15.2.7js

next nextMatch15.5.8js

next nextMatch16.0.9js

next nextRange16.1.0-canary.0–16.1.0-canary.18js

next nextMatch15.0.6js

next nextMatch14.2.34js

next nextMatch15.1.10js

next nextMatch15.4.9js

plugin-rsc @vitejs/plugin-rscRange0.4.10-alpha.1–0.5.6js

Source	Link
vercel	www.vercel.com/kb/bulletin/security-bulletin-cve-2025-55184-and-cve-2025-55183
github	www.github.com/facebook/react/commit/b45bb335db5b3632329d6b41e5a790ff6f1a7ff7
react	www.react.dev/blog/2025/12/11/denial-of-service-and-source-code-exposure-in-react-server-components
github	www.github.com/facebook/react/pull/35351
facebook	www.facebook.com/security/advisories/cve-2025-67779
github	www.github.com/facebook/react/security/advisories/GHSA-7gmr-mq3h-m5h9

03 Jun 2026 09:23Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.17.5

EPSS0.01646

SSVC