Skip to content
Threat Feed
Subscribe

Product

React-Server-Dom-Turbopack (Versions 19.0.0-19.0.7, 19.1.0-19.1.8, 19.2.0-19.2.7)

1 brief RSS
low advisory

Denial of Service Vulnerability in React Server Components

A denial of service vulnerability (CVE-2026-44907) affects multiple versions of the react-server-dom-webpack, react-server-dom-parcel, and react-server-dom-turbopack packages, allowing threat actors to trigger out-of-memory exceptions or excessive CPU usage by sending specially crafted HTTP requests to server function endpoints.

react-server-dom-webpack +2 react denial-of-service web vulnerability
1t 1c