Skip to content
OpenAdvisories
Medium WID-SEC-2025-2835 3 CVEs

Vercel Next.js und React Server Components: Mehrere Schwachstellen

Published Dec 11, 2025 · Updated Dec 11, 2025 · de-DE

Vendor: vercel Product: next.js Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Vercel Next.js und React Server Components ausnutzen, um Informationen offenzulegen und um einen Denial of Service Angriff durchzuführen.

Product

Next.js ist ein Framework für React-basierte Web-Anwendungen.
React ist eine Open-Source-JavaScript-Bibliothek zur Erstellung von Benutzeroberflächen, insbesondere für Single-Page-Anwendungen.

Vulnerabilities 3

  • High 7.5
    CVE-2025-55184 Public exploit Scanner template EPSS 64%

    Denial of Service Vulnerability in React Server Components

    A pre-authentication denial of service vulnerability exists in React Server Components versions 19.0.0, 19.0.1 19.1.0, 19.1.1, 19.1.2, 19.2.0 and 19.2.1, including the following packages: react-server-dom-parcel, react-server-dom-turbopack, and react-server-d…

    Meta react-server-dom-turbopack react-server-dom-webpack react-server-dom-parcel npm
  • High 7.5
    CVE-2025-67779 EPSS 15%

    Denial of Service Vulnerability in React Server Components

    It was found that the fix addressing CVE-2025-55184 in React Server Components was incomplete and does not prevent a denial of service attack in a specific case. React Server Components versions 19.0.2, 19.1.3 and 19.2.2 are affected, allowing unsafe deserial…

    Meta react-server-dom-parcel react-server-dom-turbopack react-server-dom-webpack npm
  • Medium 5.3
    CVE-2025-55183 Public exploit EPSS 62%

    Source Code Exposure Vulnerability in React Server Components

    An information leak vulnerability exists in specific configurations of React Server Components versions 19.0.0, 19.0.1 19.1.0, 19.1.1, 19.1.2, 19.2.0 and 19.2.1, including the following packages: react-server-dom-parcel, react-server-dom-turbopack, and react-…

    Meta react-server-dom-parcel react-server-dom-turbopack react-server-dom-webpack npm

Revision history

  1. #1

    Initiale Fassung

References