https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 17:04:11 +0000 https://db.gcve.eu/vuln/cve-2026-23870 <p><strong>Affected:</strong> Meta react-server-dom-turbopack, Meta react-server-dom-parcel, Meta react-server-dom-webpack</p> <p>A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to server crashes, out-of-memory exceptions or excessive CPU usage; affecting the following packages: react-server-dom-webpack, react-server-dom-parcel, react-server-dom-turbopack (versions 19.0.0 through 19.0.5, 19.1.0 through 19.1.6, and 19.2.0 through 19.2.5).</p> <p><strong>Affected:</strong> Meta react-server-dom-turbopack, Meta react-server-dom-parcel, Meta react-server-dom-webpack</p> <p>A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to server crashes, out-of-memory exceptions or excessive CPU usage; affecting the following packages: react-server-dom-webpack, react-server-dom-parcel, react-server-dom-turbopack (versions 19.0.0 through 19.0.5, 19.1.0 through 19.1.6, and 19.2.0 through 19.2.5).</p> https://db.gcve.eu/vuln/cve-2026-23870 https://db.gcve.eu/vuln/ghsa-rv78-f8rc-xrxh <p><strong>Affected:</strong> npm: react-server-dom-parcel, npm: react-server-dom-turbopack, npm: react-server-dom-webpack</p> <p>## Impact</p> <p>A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to out-of-memory exceptions or excessive CPU usage.</p> <p>We recommend updating immediately.</p> <p>The vulnerability exists in versions 19.0.0 through 19.0.5, 19.1.0 through 19.1.6, and 19.2.0 through 19.2.5 of:</p> <p>[react-server-dom-webpack](https://www.npmjs.com/package/react-server-dom-webpack) [react-server-dom-parcel](https://www.npmjs.com/package/react-server-dom-parcel) [react-server-dom-turbopack](https://www.npmjs.com/package/react-server-dom-turbopack?activeTab=readme)</p> <p>## Patches</p> <p>Fixes were back ported to versions 19.0.6, 19.1.7, and 19.2.6.</p> <p>If you are using any of the above packages please upgrade to any of the fixed versions immediately.</p> <p>If your app’s React code does not use a server, your app is not affected by this vulnerability. If your app does not use a framework, bundler, or bundler plugin that supports React Server Components, your app is not affected by this vulnerability.</p> <p>References See the [blog post](https://react.dev/blog/2025/12/11/denial-of-service-and-source-code-exposure-in-react-server-components) for more information and upgrade instructions.</p> <p><strong>Affected:</strong> npm: react-server-dom-parcel, npm: react-server-dom-turbopack, npm: react-server-dom-webpack</p> <p>## Impact</p> <p>A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to out-of-memory exceptions or excessive CPU usage.</p> <p>We recommend updating immediately.</p> <p>The vulnerability exists in versions 19.0.0 through 19.0.5, 19.1.0 through 19.1.6, and 19.2.0 through 19.2.5 of:</p> <p>[react-server-dom-webpack](https://www.npmjs.com/package/react-server-dom-webpack) [react-server-dom-parcel](https://www.npmjs.com/package/react-server-dom-parcel) [react-server-dom-turbopack](https://www.npmjs.com/package/react-server-dom-turbopack?activeTab=readme)</p> <p>## Patches</p> <p>Fixes were back ported to versions 19.0.6, 19.1.7, and 19.2.6.</p> <p>If you are using any of the above packages please upgrade to any of the fixed versions immediately.</p> <p>If your app’s React code does not use a server, your app is not affected by this vulnerability. If your app does not use a framework, bundler, or bundler plugin that supports React Server Components, your app is not affected by this vulnerability.</p> <p>References See the [blog post](https://react.dev/blog/2025/12/11/denial-of-service-and-source-code-exposure-in-react-server-components) for more information and upgrade instructions.</p> https://db.gcve.eu/vuln/ghsa-rv78-f8rc-xrxh