Cloudanix VulnDB

GHSA-fv66-9v8q-g76r

Critical · 10.0

CVSS

10.0

EPSS

—

Published

Dec 3, 2025

CISA due date

—

The record

React Server Components are Vulnerable to RCE

Affected packages

Ecosystem Package Introduced Fixed
npm react-server-dom-parcel 19.0.0 19.0.1
npm react-server-dom-parcel 19.0.0 No fix
npm react-server-dom-parcel 19.1.0 19.1.2
npm react-server-dom-parcel 19.2.0 19.2.1
npm react-server-dom-parcel 19.2.0 No fix
npm react-server-dom-turbopack 19.0.0 19.0.1
npm react-server-dom-turbopack 19.0.0 No fix
npm react-server-dom-turbopack 19.1.0 19.1.2
npm react-server-dom-turbopack 19.2.0 19.2.1
npm react-server-dom-turbopack 19.2.0 No fix
npm react-server-dom-webpack 19.0 19.0.1
npm react-server-dom-webpack 19.0.0 19.0.1
npm react-server-dom-webpack 19.0.0 No fix
npm react-server-dom-webpack 19.1.0 19.1.2
npm react-server-dom-webpack 19.2.0 19.2.1
npm react-server-dom-webpack 19.2.0 No fix

Related vulnerabilities