Skip to content
OpenAdvisories

Package · npm

react-server-dom-webpack

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.5
    CVE-2026-126187

    React: Unauthenticated Remote Code Execution in React Server Components

    React is a JavaScript library for building user interfaces. From 19.0.0 until 19.0.9, 19.1.10, 19.2.9, and 19.3.1, the react-server-dom-webpack, react-server-dom-parcel, and react-server-dom-turbopack packages are vulnerable to unauthenticated remote code exe…

    clerk react react-server-dom-parcel react-server-dom-webpack npm
  • Critical 10.0
    CVE-2025-55182 Exploited · Ransomware Public exploit EPSS 100%

    React Server Components are Vulnerable to RCE

    A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including the following packages: react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack. The vul…

    Meta react-server-dom-parcel react-server-dom-turbopack react-server-dom-webpack npm
    KEV Dec 5, 2025