📦 React

A critical pre-authentication remote code execution vulnerability exists in React Server Components where unsafe deserialization of HTTP payloads allows attackers to execute arbitrary code without aut...

Multiple denial of service vulnerabilities in React Server Components allow attackers to crash servers or cause resource exhaustion by sending specially crafted HTTP requests to Server Function endpoi...

This vulnerability allows attackers to send specially crafted HTTP requests to React Server Components Server Function endpoints, causing unsafe deserialization that triggers an infinite loop. This le...

A pre-authentication denial of service vulnerability in React Server Components allows attackers to send specially crafted HTTP requests to Server Function endpoints, causing infinite loops that hang ...

An information leak vulnerability in React Server Components allows attackers to retrieve source code of Server Functions via crafted HTTP requests. This affects React Server Components versions 19.0....