https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T09:04:38.240353+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-55182 CVE-2025-55182 2026-10-02T09:04:38.335180+00:00

Affected: Meta react-server-dom-webpack, Meta react-server-dom-turbopack, Meta react-server-dom-parcel

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including the following packages: react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack. The vulnerable code unsafely deserializes payloads from HTTP requests to Server Function endpoints.