Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5react/http is an event-driven, streaming HTTP client and server implementation for ReactPHP.Check if you run itEPSS 0.52%Oct 15, 2026
- CriticalUnauthenticated Remote Code Execution in React Server ComponentsOpen the advisoryOct 14, 2026
- HighGHSA-h3gv-c5rc-p453 is listed by Denial of Service in Server Functions.Open the advisoryOct 14, 2026
- High7.5CVE-2026-44907 is listed by Denial of Service in Server Functions.Check if you run itEPSS 0.60%Jul 21, 2026
- High7.5A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to server crashes, out-of…Check if you run itEPSS 1.53%May 6, 2026
- High7.5A denial of service vulnerability exists in React Server Components, affecting the following packages: react-server-dom-parcel, react-server-dom-turbopack and react-se…Check if you run itEPSS 1.55%Apr 8, 2026
- High7.5Denial of Service Vulnerabilities in React Server ComponentsCheck if you run itEPSS 2.58%Jan 26, 2026
- High7.5@vitejs/plugin-rs provides React Server Components (RSC) support for Vite.Check if you run itEPSS 0.50%Dec 16, 2025
- High7.5It was found that the fix addressing CVE-2025-55184 in React Server Components was incomplete and does not prevent a denial of service attack in a specific case.Check this weekEPSS 19.99%Dec 11, 2025
- High7.5facebook react Deserialization of Untrusted DataPatch nowKEVEPSS 66.62%Dec 11, 2025
- Medium5.3An information leak vulnerability exists in specific configurations of React Server Components versions 19.0.0, 19.0.1 19.1.0, 19.1.1, 19.1.2, 19.2.0 and 19.2.1, including the follCheck this weekEPSS 64.23%Dec 11, 2025
- Critical10.0Meta React Server Components Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.80%Dec 3, 2025
Sort
12 records