Meta vulnerabilities

Products

• React-server-dom-parcel 8
• React-server-dom-turbopack 8
• React-server-dom-webpack 8
• Whatsapp Business For Android 2
• Whatsapp Business For Ios 2
• Whatsapp For Android 2
• Whatsapp For Ios 2

Newest

• meta react-server-dom-parcel, react-server-dom-turbopack, react-server-dom-webpack +2 more react-server-dom: Denial of Service in Server Functions CVE-2026-44907 Fix available 7.5 HighJuly 21, 2026
• meta react-server-dom-parcel, react-server-dom-turbopack, react-server-dom-webpack +1 more +3 more React Server Components have a Denial of Service Vulnerability CVE-2026-23869 Public exploitFix available 7.5 HighApril 8, 2026
• facebook react-server-dom-parcel, react-server-dom-turbopack, react-server-dom-webpack +2 more Next.js HTTP request deserialization can lead to DoS when using insecure React Server Components CVE-2026-23870 Public exploitFix available 7.5 HighJanuary 28, 2026
• facebook react, meta react-server-dom-parcel, react-server-dom-turbopack +3 more +5 more React Server Components have multiple Denial of Service Vulnerabilities CVE-2026-23864 Fix available 7.5 HighJanuary 26, 2026
• facebook react, meta react-server-dom-parcel, react-server-dom-turbopack +2 more +4 more Denial of Service Vulnerability in React Server Components CVE-2025-67779 Fix available EPSS 20.0% 7.5 HighDecember 11, 2025
• facebook react, meta react-server-dom-parcel, react-server-dom-turbopack +2 more +4 more Denial of Service Vulnerability in React Server Components CVE-2025-55184 Public exploitFix available EPSS 66.6% 7.5 HighDecember 11, 2025
• facebook react, meta react-server-dom-parcel, react-server-dom-turbopack +2 more +4 more Source Code Exposure Vulnerability in React Server Components CVE-2025-55183 Public exploitFix available EPSS 64.2% 5.3 MediumDecember 11, 2025
• facebook react, meta react server components, react-server-dom-parcel +3 more +5 more React Server Components are Vulnerable to RCE CVE-2025-55182 In KEVPublic exploitFix available EPSS 99.8% 10.0 CriticalDecember 3, 2025
• meta whatsapp cloud service The WhatsApp cloud service before late 2024 did not block certain crafted PDF content that can... CVE-2025-30259 3.5 LowMarch 19, 2025
• facebook tacquito Tacquito prior to commit 07b49d1358e6ec0b5aa482fcd284f509191119e2 was not properly performing regex matches on authorized commands and arguments. Configured allowed commands/arguments were intended to… CVE-2024-49400 9.8 CriticalOctober 17, 2024
• meta react developer tools extension, facebook react-devtools +1 more React Developer Tools extension Improper Authorization vulnerability CVE-2023-5654 Fix available 6.5 MediumOctober 19, 2023
• facebook tac plus, fedoraproject fedora +1 more A lack of input validation exists in tac_plus prior to commit 4fdf178 which, when pre or post auth commands are enabled, allows an attacker who can control the username, rem-addr, or NAC address sent… CVE-2023-45239 Public exploit 9.8 CriticalOctober 6, 2023
• whatsapp, facebook whatsapp business for android, whatsapp business for ios +2 more +4 more An integer underflow in WhatsApp could have caused remote code execution when receiving a crafted... CVE-2022-27492 7.8 HighSeptember 23, 2022
• whatsapp, facebook whatsapp business for android, whatsapp business for ios +3 more +5 more An integer overflow in WhatsApp could result in remote code execution in an established video call. CVE-2022-36934 Public exploit 9.8 CriticalSeptember 22, 2022