https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 21:10:17 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-44907 <p>A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to excessive CPU usage; affecting the following packages: react-server-dom-webpack, react-server-dom-parcel, react-server-dom-turbopack (versions 19.0.0 through 19.0.7, 19.1.0 through 19.1.8, and 19.2.0 through 19.2.7).</p> <p>A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to excessive CPU usage; affecting the following packages: react-server-dom-webpack, react-server-dom-parcel, react-server-dom-turbopack (versions 19.0.0 through 19.0.7, 19.1.0 through 19.1.8, and 19.2.0 through 19.2.7).</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-44907 https://vulnerability.circl.lu/vuln/ghsa-wx67-qw84-cm4g <p><strong>Affected:</strong> npm: react-server-dom-webpack, npm: react-server-dom-turbopack, npm: react-server-dom-parcel</p> <p>### Impact</p> <p>A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to out-of-memory exceptions or excessive CPU usage.</p> <p>We recommend updating immediately.</p> <p>The vulnerability exists in versions 19.0.0 through 19.0.7, 19.1.0 through 19.1.8, and 19.2.0 through 19.2.7 of: - react-server-dom-webpack - react-server-dom-parcel - react-server-dom-turbopack</p> <p>### Patches</p> <p>Fixes were back ported to versions 19.0.8, 19.1.9, and 19.2.8.</p> <p>If you are using any of the above packages please upgrade to any of the fixed versions immediately.</p> <p>If your app’s React code does not use a server, your app is not affected by this vulnerability. If your app does not use a framework, bundler, or bundler plugin that supports React Server Components, your app is not affected by this vulnerability.</p> <p><strong>Affected:</strong> npm: react-server-dom-webpack, npm: react-server-dom-turbopack, npm: react-server-dom-parcel</p> <p>### Impact</p> <p>A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to out-of-memory exceptions or excessive CPU usage.</p> <p>We recommend updating immediately.</p> <p>The vulnerability exists in versions 19.0.0 through 19.0.7, 19.1.0 through 19.1.8, and 19.2.0 through 19.2.7 of: - react-server-dom-webpack - react-server-dom-parcel - react-server-dom-turbopack</p> <p>### Patches</p> <p>Fixes were back ported to versions 19.0.8, 19.1.9, and 19.2.8.</p> <p>If you are using any of the above packages please upgrade to any of the fixed versions immediately.</p> <p>If your app’s React code does not use a server, your app is not affected by this vulnerability. If your app does not use a framework, bundler, or bundler plugin that supports React Server Components, your app is not affected by this vulnerability.</p> https://vulnerability.circl.lu/vuln/ghsa-wx67-qw84-cm4g