https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 18:44:18 +0000 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1137 certfr-2025-avi-1137 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1137 https://cve.radiocsirt.org/vuln/euvd-2026-265063 EUVD-2026-265063 https://cve.radiocsirt.org/vuln/euvd-2026-265063 https://cve.radiocsirt.org/vuln/fkie_cve-2025-55183 <p>An information leak vulnerability exists in specific configurations of React Server Components versions 19.0.0, 19.0.1 19.1.0, 19.1.1, 19.1.2, 19.2.0 and 19.2.1, including the following packages: react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack. A specifically crafted HTTP request sent to a vulnerable Server Function may unsafely return the source code of any Server Function. Exploitation requires the existence of a Server Function which explicitly or implicitly exposes a stringified argument.</p> <p>An information leak vulnerability exists in specific configurations of React Server Components versions 19.0.0, 19.0.1 19.1.0, 19.1.1, 19.1.2, 19.2.0 and 19.2.1, including the following packages: react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack. A specifically crafted HTTP request sent to a vulnerable Server Function may unsafely return the source code of any Server Function. Exploitation requires the existence of a Server Function which explicitly or implicitly exposes a stringified argument.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-55183 https://cve.radiocsirt.org/vuln/ghsa-925w-6v3x-g4j4 <p><strong>Affected:</strong> npm: react-server-dom-parcel, npm: react-server-dom-turbopack, npm: react-server-dom-webpack</p> <p>## Impact</p> <p>There is a source code exposure vulnerability in React Server Components.</p> <p>React recommends updating immediately.</p> <p>The vulnerability exists in versions 19.0.0, 19.0.1 19.1.0, 19.1.1, 19.1.2, 19.2.0 and 19.2.1 of:</p> <p>- [react-server-dom-webpack](https://www.npmjs.com/package/react-server-dom-webpack) - [react-server-dom-parcel](https://www.npmjs.com/package/react-server-dom-parcel) - [react-server-dom-turbopack](https://www.npmjs.com/package/react-server-dom-turbopack?activeTab=readme)</p> <p>These issues are present in the patches published last week.</p> <p>## Patches</p> <p>Fixes were back ported to versions 19.0.2, 19.1.3, and 19.2.2.</p> <p>If you are using any of the above packages please upgrade to any of the fixed versions immediately.</p> <p>If your app’s React code does not use a server, your app is not affected by this vulnerability. If your app does not use a framework, bundler, or bundler plugin that supports React Server Components, your app is not affected by this vulnerability.</p> <p>## References</p> <p>See the [blog post](https://react.dev/blog/2025/12/11/denial-of-service-and-source-code-exposure-in-react-server-components) for more information and upgrade instructions.</p> <p><strong>Affected:</strong> npm: react-server-dom-parcel, npm: react-server-dom-turbopack, npm: react-server-dom-webpack</p> <p>## Impact</p> <p>There is a source code exposure vulnerability in React Server Components.</p> <p>React recommends updating immediately.</p> <p>The vulnerability exists in versions 19.0.0, 19.0.1 19.1.0, 19.1.1, 19.1.2, 19.2.0 and 19.2.1 of:</p> <p>- [react-server-dom-webpack](https://www.npmjs.com/package/react-server-dom-webpack) - [react-server-dom-parcel](https://www.npmjs.com/package/react-server-dom-parcel) - [react-server-dom-turbopack](https://www.npmjs.com/package/react-server-dom-turbopack?activeTab=readme)</p> <p>These issues are present in the patches published last week.</p> <p>## Patches</p> <p>Fixes were back ported to versions 19.0.2, 19.1.3, and 19.2.2.</p> <p>If you are using any of the above packages please upgrade to any of the fixed versions immediately.</p> <p>If your app’s React code does not use a server, your app is not affected by this vulnerability. If your app does not use a framework, bundler, or bundler plugin that supports React Server Components, your app is not affected by this vulnerability.</p> <p>## References</p> <p>See the [blog post](https://react.dev/blog/2025/12/11/denial-of-service-and-source-code-exposure-in-react-server-components) for more information and upgrade instructions.</p> https://cve.radiocsirt.org/vuln/ghsa-925w-6v3x-g4j4 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2835 <p>Ein Angreifer kann mehrere Schwachstellen in Vercel Next.js und React Server Components ausnutzen, um Informationen offenzulegen und um einen Denial of Service Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Vercel Next.js und React Server Components ausnutzen, um Informationen offenzulegen und um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2835