7.5
CVE-2026-23870
- EPSS 1.53%
- Veröffentlicht 06.05.2026 16:24:55
- Zuletzt bearbeitet 12.08.2026 15:51:57
- CVE-Watchlists
- Unerledigt
LoginA denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to server crashes, out-of-memory exceptions or excessive CPU usage; affecting the following packages: react-server-dom-webpack, react-server-dom-parcel, react-server-dom-turbopack (versions 19.0.0 through 19.0.5, 19.1.0 through 19.1.6, and 19.2.0 through 19.2.5).
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Facebook ≫ React-server-dom-parcel SwPlatformnode.js Version >= 19.0.0 <= 19.0.5
Facebook ≫ React-server-dom-parcel SwPlatformnode.js Version >= 19.1.0 <= 19.1.6
Facebook ≫ React-server-dom-parcel SwPlatformnode.js Version >= 19.2.0 <= 19.2.5
Facebook ≫ React-server-dom-turbopack SwPlatformnode.js Version >= 19.0.0 <= 19.0.5
Facebook ≫ React-server-dom-turbopack SwPlatformnode.js Version >= 19.1.0 <= 19.1.6
Facebook ≫ React-server-dom-turbopack SwPlatformnode.js Version >= 19.2.0 <= 19.2.5
Facebook ≫ React-server-dom-webpack SwPlatformnode.js Version >= 19.0.0 <= 19.0.5
Facebook ≫ React-server-dom-webpack SwPlatformnode.js Version >= 19.1.0 <= 19.1.6
Facebook ≫ React-server-dom-webpack SwPlatformnode.js Version >= 19.2.0 <= 19.2.5
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.53% | 0.715 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
|
CWE-400 Uncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
https://github.com/facebook/react/security/advisories/GHSA-rv78-f8rc-xrxh