Meta

7 results · Clear filters · Feed

• High 7.5
  CVE-2026-44907

  react-server-dom: Denial of Service in Server Functions

  A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to excessive CPU usage; affecting the following packages: react-server-dom-webpack, react-server-dom-parcel, react-se…

  Meta react-server-dom-turbopack react-server-dom-webpack react-server-dom-parcel npm
  Jul 21, 2026
• High 7.5
  CVE-2026-23870 Public exploit

  Facebook React has a Denial of Service Vulnerability in React Server Components

  A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to server crashes, out-of-memory exceptions or excessive CPU usage; affecting the following packages: react-server-do…

  Meta react-server-dom-turbopack react-server-dom-webpack react-server-dom-parcel npm
  May 6, 2026
• High 7.5
  CVE-2026-23869 Public exploit

  React Server Components have a Denial of Service Vulnerability

  A denial of service vulnerability exists in React Server Components, affecting the following packages: react-server-dom-parcel, react-server-dom-turbopack and react-server-dom-webpack (versions 19.0.0 through 19.0.4, 19.1.0 through 19.1.5, and 19.2.0 through …

  Meta react-server-dom-parcel react-server-dom-turbopack react-server-dom-webpack npm
  Apr 8, 2026
• High 7.5
  CVE-2026-23864

  React Server Components have multiple Denial of Service Vulnerabilities

  Multiple denial of service vulnerabilities exist in React Server Components, affecting the following packages: react-server-dom-parcel, react-server-dom-turbopack, react-server-dom-webpack. The vulnerabilities are triggered by sending specially crafted HTTP r…

  Meta react-server-dom-parcel react-server-dom-turbopack react-server-dom-webpack npm
  Jan 26, 2026
• High 7.5
  CVE-2025-67779 EPSS 20%

  Denial of Service Vulnerability in React Server Components

  It was found that the fix addressing CVE-2025-55184 in React Server Components was incomplete and does not prevent a denial of service attack in a specific case. React Server Components versions 19.0.2, 19.1.3 and 19.2.2 are affected, allowing unsafe deserial…

  Meta react-server-dom-parcel react-server-dom-turbopack react-server-dom-webpack npm
  Dec 11, 2025
• High 7.5
  CVE-2025-55184 Public exploit EPSS 67%

  Denial of Service Vulnerability in React Server Components

  A pre-authentication denial of service vulnerability exists in React Server Components versions 19.0.0, 19.0.1 19.1.0, 19.1.1, 19.1.2, 19.2.0 and 19.2.1, including the following packages: react-server-dom-parcel, react-server-dom-turbopack, and react-server-d…

  Meta react-server-dom-turbopack react-server-dom-webpack react-server-dom-parcel npm
  Dec 11, 2025
• High 7.8
  CVE-2022-27492

  An integer underflow in WhatsApp could have caused remote code execution when receiving a crafted video file.

  Meta WhatsApp for iOS WhatsApp Business for Android WhatsApp Business for iOS Android iOS
  Sep 23, 2022