Skip to content
OpenAdvisories

Package · npm

@vitejs/plugin-rsc

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.5
    GHSA-w94c-4vhp-22gx

    @vitejs/plugin-rsc has a Denial of Service Vulnerability in React Server Components

    ### Impact `@vitejs/plugin-rsc` vendors `react-server-dom-webpack`, which contained a vulnerability in versions prior to 19.2.6. See details in React repository's advisory https://github.com/facebook/react/security/advisories/GHSA-rv78-f8rc-xrxh ### Patches U…

    @vitejs/plugin-rsc npm
  • High 7.5
    GHSA-v457-wxvj-p9w9

    @vitejs/plugin-rsc has a Denial of Service with React Server Components

    ### Impact `@vitejs/plugin-rsc` vendors `react-server-dom-webpack`, which contained a vulnerability in versions prior to 19.2.4. See details in React repository's advisory https://github.com/facebook/react/security/advisories/GHSA-479c-33wc-g2pg ### Patches U…

    @vitejs/plugin-rsc npm
  • High 7.5
    CVE-2025-68155

    @vitejs/plugin-rsc has Arbitrary File Read via `/__vite_rsc_findSourceMapURL` Endpoint on Development

    @vitejs/plugin-rs provides React Server Components (RSC) support for Vite. Prior to version 0.5.8, the `/__vite_rsc_findSourceMapURL` endpoint in `@vitejs/plugin-rsc` allows unauthenticated arbitrary file read during development mode. An attacker can read any…

    vitejs vite-plugin-react @vitejs/plugin-rsc npm
  • High 7.5
    GHSA-cpqf-f22c-r95x

    Vite Plugin React has a Denial of Service Vulnerability in React Server Components

    ### Impact `@vitejs/plugin-rsc` vendors `react-server-dom-webpack`, which contained a vulnerability in versions prior to 19.2.3. See details in React repository's advisory https://github.com/facebook/react/security/advisories/GHSA-7gmr-mq3h-m5h9 ### Patches U…

    @vitejs/plugin-rsc npm