Skip to content
OpenAdvisories

Product · clerk

react

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.5
    CVE-2026-126187

    React: Unauthenticated Remote Code Execution in React Server Components

    React is a JavaScript library for building user interfaces. From 19.0.0 until 19.0.9, 19.1.10, 19.2.9, and 19.3.1, the react-server-dom-webpack, react-server-dom-parcel, and react-server-dom-turbopack packages are vulnerable to unauthenticated remote code exe…

    clerk react react-server-dom-turbopack react-server-dom-parcel npm