5.3

CVE-2025-55183

Medienbericht
Exploit
An information leak vulnerability exists in specific configurations of React Server Components versions 19.0.0, 19.0.1 19.1.0, 19.1.1, 19.1.2, 19.2.0 and 19.2.1, including the following packages: react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack. A specifically crafted HTTP request sent to a vulnerable Server Function may unsafely return the source code of any Server Function. Exploitation requires the existence of a Server Function which explicitly or implicitly exposes a stringified argument.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Vercel ≫ Next.Js SwPlatform node.js Version >= 15.0.0 < 15.0.7
Vercel ≫ Next.Js SwPlatform node.js Version >= 15.1.0 < 15.1.11
Vercel ≫ Next.Js SwPlatform node.js Version >= 15.2.0 < 15.2.8
Vercel ≫ Next.Js SwPlatform node.js Version >= 15.3.0 < 15.3.8
Vercel ≫ Next.Js SwPlatform node.js Version >= 15.4.0 < 15.4.10
Vercel ≫ Next.Js SwPlatform node.js Version >= 15.5.0 < 15.5.9
Vercel ≫ Next.Js SwPlatform node.js Version >= 16.0.0 < 16.0.10
Vercel ≫ Next.Js Version 15.6.0 Update - SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary0 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary1 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary10 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary11 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary12 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary13 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary14 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary15 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary16 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary17 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary18 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary19 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary2 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary20 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary21 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary22 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary23 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary24 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary25 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary26 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary27 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary28 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary29 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary3 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary30 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary31 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary32 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary33 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary34 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary35 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary36 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary37 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary38 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary39 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary4 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary40 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary41 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary42 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary43 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary44 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary45 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary46 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary47 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary48 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary49 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary5 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary50 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary51 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary52 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary53 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary54 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary55 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary56 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary57 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary58 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary59 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary6 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary7 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary8 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary9 SwPlatform node.js
Vercel ≫ Next.Js Version 16.1.0 Update - SwPlatform node.js
Vercel ≫ Next.Js Version 16.1.0 Update canary0 SwPlatform node.js
Vercel ≫ Next.Js Version 16.1.0 Update canary1 SwPlatform node.js
Vercel ≫ Next.Js Version 16.1.0 Update canary10 SwPlatform node.js
Vercel ≫ Next.Js Version 16.1.0 Update canary11 SwPlatform node.js
Vercel ≫ Next.Js Version 16.1.0 Update canary12 SwPlatform node.js
Vercel ≫ Next.Js Version 16.1.0 Update canary13 SwPlatform node.js
Vercel ≫ Next.Js Version 16.1.0 Update canary14 SwPlatform node.js
Vercel ≫ Next.Js Version 16.1.0 Update canary15 SwPlatform node.js
Vercel ≫ Next.Js Version 16.1.0 Update canary16 SwPlatform node.js
Vercel ≫ Next.Js Version 16.1.0 Update canary17 SwPlatform node.js
Vercel ≫ Next.Js Version 16.1.0 Update canary18 SwPlatform node.js
Vercel ≫ Next.Js Version 16.1.0 Update canary2 SwPlatform node.js
Vercel ≫ Next.Js Version 16.1.0 Update canary3 SwPlatform node.js
Vercel ≫ Next.Js Version 16.1.0 Update canary4 SwPlatform node.js
Vercel ≫ Next.Js Version 16.1.0 Update canary5 SwPlatform node.js
Vercel ≫ Next.Js Version 16.1.0 Update canary6 SwPlatform node.js
Vercel ≫ Next.Js Version 16.1.0 Update canary7 SwPlatform node.js
Vercel ≫ Next.Js Version 16.1.0 Update canary8 SwPlatform node.js
Vercel ≫ Next.Js Version 16.1.0 Update canary9 SwPlatform node.js
Facebook ≫ React Version >= 19.0.0 < 19.0.2
Facebook ≫ React Version >= 19.1.0 < 19.1.3
Facebook ≫ React Version >= 19.2.0 < 19.2.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 64.23% 0.992
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Facebook 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
15.12.2025 09:32
https://react.dev/blog/2025/12/11/denial-of-service-and-source-code-exposure-in-react-server-components
Vendor Advisory
Exploit
https://www.facebook.com/security/advisories/cve-2025-55183
Vendor Advisory