Medium WID-SEC-2026-1011 1 CVE

Vercel Next.js: Schwachstelle ermöglicht Denial of Service

Published Apr 8, 2026 · Updated Apr 8, 2026 · de-DE

Vendor: vercel Product: next.js Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Vercel Next.js ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

Next.js ist ein Framework für React-basierte Web-Anwendungen.

Vulnerabilities 1

High 7.5

CVE-2026-23869 Public exploit

React Server Components have a Denial of Service Vulnerability

A denial of service vulnerability exists in React Server Components, affecting the following packages: react-server-dom-parcel, react-server-dom-turbopack and react-server-dom-webpack (versions 19.0.0 through 19.0.4, 19.1.0 through 19.1.5, and 19.2.0 through …

Meta react-server-dom-parcel react-server-dom-turbopack react-server-dom-webpack npm

Apr 8, 2026

Revision history

2026-04-08 #1
Initiale Fassung

References

GitHub Security Advisory GHSA-q4gf-8mx6-v5v3 vom 2026-04-08
https://github.com/vercel/next.js/security/advisories/GHSA-q4gf-8mx6-v5v3