Skip to content
OpenAdvisories

Vendor

Meta

14 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-55183 Public exploit EPSS 64%

    Source Code Exposure Vulnerability in React Server Components

    An information leak vulnerability exists in specific configurations of React Server Components versions 19.0.0, 19.0.1 19.1.0, 19.1.1, 19.1.2, 19.2.0 and 19.2.1, including the following packages: react-server-dom-parcel, react-server-dom-turbopack, and react-…

  • Medium 6.5

    React Developer Tools extension Improper Authorization vulnerability

    The React Developer Tools extension registers a message listener with window.addEventListener('message', <listener>) in a content script that is accessible to any webpage that is active in the browser. Within the listener is code that requests a URL derived f…