7.5

CVE-2025-67779

Medienbericht
It was found that the fix addressing CVE-2025-55184 in React Server Components was incomplete and does not prevent a denial of service attack in a specific case. React Server Components versions 19.0.2, 19.1.3 and 19.2.2 are affected, allowing unsafe deserialization of payloads from HTTP requests to Server Function endpoints. This can cause an infinite loop that hangs the server process and may prevent future HTTP requests from being served.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Facebook ≫ React Version 19.0.2
Facebook ≫ React Version 19.1.3
Facebook ≫ React Version 19.2.2
Vercel ≫ Next.Js SwPlatform node.js Version >= 13.3.0 < 14.2.35
Vercel ≫ Next.Js SwPlatform node.js Version >= 15.0.0 < 15.0.7
Vercel ≫ Next.Js SwPlatform node.js Version >= 15.1.0 < 15.1.11
Vercel ≫ Next.Js SwPlatform node.js Version >= 15.2.0 < 15.2.8
Vercel ≫ Next.Js SwPlatform node.js Version >= 15.3.0 < 15.3.8
Vercel ≫ Next.Js SwPlatform node.js Version >= 15.4.0 < 15.4.10
Vercel ≫ Next.Js SwPlatform node.js Version >= 15.5.0 < 15.5.9
Vercel ≫ Next.Js SwPlatform node.js Version >= 16.0.0 < 16.0.10
Vercel ≫ Next.Js Version 15.6.0 Update - SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary0 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary1 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary10 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary11 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary12 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary13 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary14 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary15 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary16 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary17 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary18 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary19 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary2 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary20 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary21 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary22 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary23 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary24 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary25 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary26 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary27 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary28 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary29 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary3 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary30 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary31 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary32 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary33 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary34 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary35 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary36 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary37 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary38 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary39 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary4 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary40 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary41 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary42 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary43 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary44 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary45 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary46 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary47 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary48 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary49 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary5 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary50 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary51 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary52 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary53 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary54 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary55 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary56 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary57 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary58 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary59 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary6 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary7 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary8 SwPlatform node.js
Vercel ≫ Next.Js Version 15.6.0 Update canary9 SwPlatform node.js
Vercel ≫ Next.Js Version 16.1.0 Update - SwPlatform node.js
Vercel ≫ Next.Js Version 16.1.0 Update canary0 SwPlatform node.js
Vercel ≫ Next.Js Version 16.1.0 Update canary1 SwPlatform node.js
Vercel ≫ Next.Js Version 16.1.0 Update canary10 SwPlatform node.js
Vercel ≫ Next.Js Version 16.1.0 Update canary11 SwPlatform node.js
Vercel ≫ Next.Js Version 16.1.0 Update canary12 SwPlatform node.js
Vercel ≫ Next.Js Version 16.1.0 Update canary13 SwPlatform node.js
Vercel ≫ Next.Js Version 16.1.0 Update canary14 SwPlatform node.js
Vercel ≫ Next.Js Version 16.1.0 Update canary15 SwPlatform node.js
Vercel ≫ Next.Js Version 16.1.0 Update canary16 SwPlatform node.js
Vercel ≫ Next.Js Version 16.1.0 Update canary17 SwPlatform node.js
Vercel ≫ Next.Js Version 16.1.0 Update canary18 SwPlatform node.js
Vercel ≫ Next.Js Version 16.1.0 Update canary2 SwPlatform node.js
Vercel ≫ Next.Js Version 16.1.0 Update canary3 SwPlatform node.js
Vercel ≫ Next.Js Version 16.1.0 Update canary4 SwPlatform node.js
Vercel ≫ Next.Js Version 16.1.0 Update canary5 SwPlatform node.js
Vercel ≫ Next.Js Version 16.1.0 Update canary6 SwPlatform node.js
Vercel ≫ Next.Js Version 16.1.0 Update canary7 SwPlatform node.js
Vercel ≫ Next.Js Version 16.1.0 Update canary8 SwPlatform node.js
Vercel ≫ Next.Js Version 16.1.0 Update canary9 SwPlatform node.js
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 20.26% 0.972
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Facebook 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource.

CWE-502 Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
15.12.2025 09:32
https://react.dev/blog/2025/12/11/denial-of-service-and-source-code-exposure-in-react-server-components
Vendor Advisory
https://www.facebook.com/security/advisories/cve-2025-67779
Vendor Advisory