Vendor

Meta

14 known vulnerabilities.

Products

react-server-dom-turbopack 8 react-server-dom-parcel 8 react-server-dom-webpack 8 WhatsApp Business for iOS 2 WhatsApp for iOS 2 WhatsApp for Android 2 WhatsApp Business for Android 2 React Developer Tools Extension 1 tac_plus 1 WhatsApp cloud service 1 Tacquito 1 WhatsApp 0

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

Critical 10.0

CVE-2025-55182 Exploited · Ransomware Public exploit Scanner template EPSS 100%

React Server Components are Vulnerable to RCE

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including the following packages: react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack. The vul…

Meta react-server-dom-parcel react-server-dom-turbopack react-server-dom-webpack npm

Dec 3, 2025
KEV Dec 5, 2025
Critical 9.8

CVE-2024-49400

Tacquito prior to commit 07b49d1358e6ec0b5aa482fcd284f509191119e2 was not properly performing regex matches on authoriz…

Meta Tacquito

Oct 17, 2024
Critical 9.8

CVE-2022-36934 Public exploit

An integer overflow in WhatsApp could result in remote code execution in an established video call.

Meta WhatsApp for iOS WhatsApp Business for Android WhatsApp Business for iOS Android iOS

Sep 22, 2022