Facebook / React
6 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-23864 | react-server-dom-webpack: react-server-dom-parcel: reactreact-server-dom-turbopack: React Server Components: Denial of Service via specially crafted HTTP reque… | HIGH | 7.5 | Jan 26, 2026 |
| CVE-2025-67779 | next: React Server Components: Denial of Service via Unsafe Deserialization | HIGH | 7.5 | Dec 11, 2025 |
| CVE-2025-55184 | next: React Server Components: Denial of Service via unsafe HTTP deserialization | HIGH | 7.5 | Dec 11, 2025 |
| CVE-2025-55183 | next: React Server Components: Source code exposure through crafted HTTP request | MEDIUM | 5.3 | Dec 11, 2025 |
| CVE-2025-55182 KEV | next: React Server Components: Pre-authentication remote code execution via unsafe deserialization | CRITICAL | 10.0 | Dec 3, 2025 |
| CVE-2018-6341 | React applications which rendered to HTML using the ReactDOMServer API were not escaping user-supplied attribute names at render-time. That lack of escaping co… | MEDIUM | 6.1 | Dec 31, 2018 |
Showing 1 to 6 of 6 CVEs