Meta react-server-dom-webpack vulnerabilities
8 published CVEs name Meta react-server-dom-webpack among the affected products; CISA lists 1 of them as exploited in the wild.
- 8Published CVEs8 of them scored
- 8Last 12 monthspublished in the last year
- 1Critical6 more rated high
- 1Known exploitedin CISA's KEV catalog
Known exploited
Newest addition to KEV first.
- CVE-2025-55182
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including the following…
Meta · react-server-dom-webpack
ExploitedCritical10.0