CVE-2025-55184

Medienbericht

EPSS 19.23%
Veröffentlicht 11.12.2025 20:16:00
Zuletzt bearbeitet 15.12.2025 17:15:53
Quelle cve-assign@fb.com
CVE-Watchlists
Login
Unerledigt
Login

A pre-authentication denial of service vulnerability exists in React Server Components versions 19.0.0, 19.0.1 19.1.0, 19.1.1, 19.1.2, 19.2.0 and 19.2.1, including the following packages: react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack. The vulnerable code unsafely deserializes payloads from HTTP requests to Server Function endpoints, which can cause an infinite loop that hangs the server process and may prevent future HTTP requests from being served.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Facebook ≫ React Version >= 19.0.0 < 19.0.2

Facebook ≫ React Version >= 19.1.0 < 19.1.3

Facebook ≫ React Version >= 19.2.0 < 19.2.2

Vercel ≫ Next.Js SwPlatformnode.js Version >= 13.3.0 < 14.2.35

Vercel ≫ Next.Js SwPlatformnode.js Version >= 15.0.0 < 15.0.7

Vercel ≫ Next.Js SwPlatformnode.js Version >= 15.1.0 < 15.1.11

Vercel ≫ Next.Js SwPlatformnode.js Version >= 15.2.0 < 15.2.8

Vercel ≫ Next.Js SwPlatformnode.js Version >= 15.3.0 < 15.3.8

Vercel ≫ Next.Js SwPlatformnode.js Version >= 15.4.0 < 15.4.10

Vercel ≫ Next.Js SwPlatformnode.js Version >= 15.5.0 < 15.5.9

Vercel ≫ Next.Js SwPlatformnode.js Version >= 16.0.0 < 16.0.10

Vercel ≫ Next.Js Version15.6.0 Update- SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary0 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary1 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary10 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary11 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary12 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary13 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary14 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary15 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary16 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary17 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary18 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary19 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary2 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary20 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary21 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary22 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary23 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary24 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary25 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary26 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary27 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary28 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary29 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary3 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary30 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary31 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary32 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary33 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary34 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary35 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary36 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary37 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary38 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary39 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary4 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary40 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary41 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary42 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary43 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary44 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary45 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary46 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary47 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary48 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary49 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary5 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary50 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary51 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary52 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary53 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary54 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary55 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary56 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary57 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary58 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary59 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary6 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary7 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary8 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary9 SwPlatformnode.js

Vercel ≫ Next.Js Version16.1.0 Update- SwPlatformnode.js

Vercel ≫ Next.Js Version16.1.0 Updatecanary0 SwPlatformnode.js

Vercel ≫ Next.Js Version16.1.0 Updatecanary1 SwPlatformnode.js

Vercel ≫ Next.Js Version16.1.0 Updatecanary10 SwPlatformnode.js

Vercel ≫ Next.Js Version16.1.0 Updatecanary11 SwPlatformnode.js

Vercel ≫ Next.Js Version16.1.0 Updatecanary12 SwPlatformnode.js

Vercel ≫ Next.Js Version16.1.0 Updatecanary13 SwPlatformnode.js

Vercel ≫ Next.Js Version16.1.0 Updatecanary14 SwPlatformnode.js

Vercel ≫ Next.Js Version16.1.0 Updatecanary15 SwPlatformnode.js

Vercel ≫ Next.Js Version16.1.0 Updatecanary16 SwPlatformnode.js

Vercel ≫ Next.Js Version16.1.0 Updatecanary17 SwPlatformnode.js

Vercel ≫ Next.Js Version16.1.0 Updatecanary18 SwPlatformnode.js

Vercel ≫ Next.Js Version16.1.0 Updatecanary2 SwPlatformnode.js

Vercel ≫ Next.Js Version16.1.0 Updatecanary3 SwPlatformnode.js

Vercel ≫ Next.Js Version16.1.0 Updatecanary4 SwPlatformnode.js

Vercel ≫ Next.Js Version16.1.0 Updatecanary5 SwPlatformnode.js

Vercel ≫ Next.Js Version16.1.0 Updatecanary6 SwPlatformnode.js

Vercel ≫ Next.Js Version16.1.0 Updatecanary7 SwPlatformnode.js

Vercel ≫ Next.Js Version16.1.0 Updatecanary8 SwPlatformnode.js

Vercel ≫ Next.Js Version16.1.0 Updatecanary9 SwPlatformnode.js

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	19.23%	0.952

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
cve-assign@fb.com	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-502 Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

https://www.heise.de/news/React2Shell-Patch-unzureichend-Angriffe-weiten-sich-aus-11114849.html

Medienbericht

heise Security

15.12.2025 09:32

https://react.dev/blog/2025/12/11/denial-of-service-and-source-code-exposure-in-react-server-components

Vendor Advisory

https://www.facebook.com/security/advisories/cve-2025-55184

Vendor Advisory

https://github.com/KingHacker353/CVE-2025-55184

https://nvd.nist.gov/vuln/detail/CVE-2025-55184

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-55184

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-55184

EUVD