CVE-2025-67779

Medienbericht

EPSS 0.08%
Veröffentlicht 11.12.2025 23:36:20
Zuletzt bearbeitet 12.12.2025 19:16:03
Quelle cve-assign@fb.com
CVE-Watchlists
Login
Unerledigt
Login

It was found that the fix addressing CVE-2025-55184 in React Server Components was incomplete and does not prevent a denial of service attack in a specific case. React Server Components versions 19.0.2, 19.1.3 and 19.2.2 are affected, allowing unsafe deserialization of payloads from HTTP requests to Server Function endpoints. This can cause an infinite loop that hangs the server process and may prevent future HTTP requests from being served.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 2 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Facebook ≫ React Version19.0.2

Facebook ≫ React Version19.1.3

Facebook ≫ React Version19.2.2

Vercel ≫ Next.Js SwPlatformnode.js Version >= 13.3.0 < 14.2.35

Vercel ≫ Next.Js SwPlatformnode.js Version >= 15.0.0 < 15.0.7

Vercel ≫ Next.Js SwPlatformnode.js Version >= 15.1.0 < 15.1.11

Vercel ≫ Next.Js SwPlatformnode.js Version >= 15.2.0 < 15.2.8

Vercel ≫ Next.Js SwPlatformnode.js Version >= 15.3.0 < 15.3.8

Vercel ≫ Next.Js SwPlatformnode.js Version >= 15.4.0 < 15.4.10

Vercel ≫ Next.Js SwPlatformnode.js Version >= 15.5.0 < 15.5.9

Vercel ≫ Next.Js SwPlatformnode.js Version >= 16.0.0 < 16.0.10

Vercel ≫ Next.Js Version15.6.0 Update- SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary0 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary1 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary10 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary11 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary12 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary13 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary14 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary15 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary16 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary17 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary18 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary19 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary2 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary20 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary21 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary22 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary23 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary24 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary25 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary26 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary27 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary28 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary29 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary3 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary30 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary31 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary32 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary33 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary34 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary35 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary36 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary37 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary38 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary39 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary4 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary40 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary41 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary42 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary43 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary44 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary45 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary46 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary47 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary48 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary49 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary5 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary50 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary51 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary52 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary53 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary54 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary55 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary56 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary57 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary58 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary59 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary6 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary7 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary8 SwPlatformnode.js

Vercel ≫ Next.Js Version15.6.0 Updatecanary9 SwPlatformnode.js

Vercel ≫ Next.Js Version16.1.0 Update- SwPlatformnode.js

Vercel ≫ Next.Js Version16.1.0 Updatecanary0 SwPlatformnode.js

Vercel ≫ Next.Js Version16.1.0 Updatecanary1 SwPlatformnode.js

Vercel ≫ Next.Js Version16.1.0 Updatecanary10 SwPlatformnode.js

Vercel ≫ Next.Js Version16.1.0 Updatecanary11 SwPlatformnode.js

Vercel ≫ Next.Js Version16.1.0 Updatecanary12 SwPlatformnode.js

Vercel ≫ Next.Js Version16.1.0 Updatecanary13 SwPlatformnode.js

Vercel ≫ Next.Js Version16.1.0 Updatecanary14 SwPlatformnode.js

Vercel ≫ Next.Js Version16.1.0 Updatecanary15 SwPlatformnode.js

Vercel ≫ Next.Js Version16.1.0 Updatecanary16 SwPlatformnode.js

Vercel ≫ Next.Js Version16.1.0 Updatecanary17 SwPlatformnode.js

Vercel ≫ Next.Js Version16.1.0 Updatecanary18 SwPlatformnode.js

Vercel ≫ Next.Js Version16.1.0 Updatecanary2 SwPlatformnode.js

Vercel ≫ Next.Js Version16.1.0 Updatecanary3 SwPlatformnode.js

Vercel ≫ Next.Js Version16.1.0 Updatecanary4 SwPlatformnode.js

Vercel ≫ Next.Js Version16.1.0 Updatecanary5 SwPlatformnode.js

Vercel ≫ Next.Js Version16.1.0 Updatecanary6 SwPlatformnode.js

Vercel ≫ Next.Js Version16.1.0 Updatecanary7 SwPlatformnode.js

Vercel ≫ Next.Js Version16.1.0 Updatecanary8 SwPlatformnode.js

Vercel ≫ Next.Js Version16.1.0 Updatecanary9 SwPlatformnode.js

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.08%	0.247

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
cve-assign@fb.com	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

CWE-502 Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

https://www.heise.de/news/React2Shell-Patch-unzureichend-Angriffe-weiten-sich-aus-11114849.html

Medienbericht

heise Security

15.12.2025 09:32

https://react.dev/blog/2025/12/11/denial-of-service-and-source-code-exposure-in-react-server-components

Vendor Advisory

https://www.facebook.com/security/advisories/cve-2025-67779

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2025-67779

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-67779

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-67779

EUVD