Meta React-server-dom-turbopack vulnerabilities

• meta react-server-dom-parcel, react-server-dom-turbopack, react-server-dom-webpack +2 more react-server-dom: Denial of Service in Server Functions CVE-2026-44907 Fix available 7.5 HighJuly 21, 2026
• meta react-server-dom-parcel, react-server-dom-turbopack, react-server-dom-webpack +1 more +3 more React Server Components have a Denial of Service Vulnerability CVE-2026-23869 Public exploitFix available 7.5 HighApril 8, 2026
• facebook react-server-dom-parcel, react-server-dom-turbopack, react-server-dom-webpack +2 more Next.js HTTP request deserialization can lead to DoS when using insecure React Server Components CVE-2026-23870 Public exploitFix available 7.5 HighJanuary 28, 2026
• facebook react, meta react-server-dom-parcel, react-server-dom-turbopack +3 more +5 more React Server Components have multiple Denial of Service Vulnerabilities CVE-2026-23864 Fix available 7.5 HighJanuary 26, 2026
• facebook react, meta react-server-dom-parcel, react-server-dom-turbopack +2 more +4 more Denial of Service Vulnerability in React Server Components CVE-2025-67779 Fix available EPSS 20.0% 7.5 HighDecember 11, 2025
• facebook react, meta react-server-dom-parcel, react-server-dom-turbopack +2 more +4 more Denial of Service Vulnerability in React Server Components CVE-2025-55184 Public exploitFix available EPSS 66.6% 7.5 HighDecember 11, 2025
• facebook react, meta react-server-dom-parcel, react-server-dom-turbopack +2 more +4 more Source Code Exposure Vulnerability in React Server Components CVE-2025-55183 Public exploitFix available EPSS 64.2% 5.3 MediumDecember 11, 2025
• facebook react, meta react server components, react-server-dom-parcel +3 more +5 more React Server Components are Vulnerable to RCE CVE-2025-55182 In KEVPublic exploitFix available EPSS 99.7% 10.0 CriticalDecember 3, 2025