Mend.io Vulnerability Database
The largest open source vulnerability database
What is a Vulnerability ID?
New vulnerability? Tell us about it!
CVE-2026-126187
Published:November 10, 2026
Updated:November 11, 2026
React is a JavaScript library for building user interfaces. From 19.0.0 until 19.0.9, 19.1.10, 19.2.9, and 19.3.1, the react-server-dom-webpack, react-server-dom-parcel, and react-server-dom-turbopack packages are vulnerable to unauthenticated remote code execution through crafted payloads targeting frameworks that support React Server Components. The vulnerability only affects extremely rare cases where responses transport multiple typed arrays and an attacker-controlled value. Applications whose React code does not use a server are not affected. Applications that do not use a framework, bundler, or bundler plugin that supports React Server Components are not affected. This issue is fixed in versions 19.0.9, 19.1.10, 19.2.9, and 19.3.1.
Affected Packages
https://github.com/react/react.git (GITHUB):
Affected version(s) >=v19.0.0 <v19.0.9
Fix Suggestion:
Update to version v19.0.9
https://github.com/react/react.git (GITHUB):
Affected version(s) =v19.3.0 <v19.3.1
Fix Suggestion:
Update to version v19.3.1
https://github.com/react/react.git (GITHUB):
Affected version(s) >=v19.2.0 <v19.2.9
Fix Suggestion:
Update to version v19.2.9
https://github.com/react/react.git (GITHUB):
Affected version(s) >=v19.1.0 <v19.1.10
Fix Suggestion:
Update to version v19.1.10
react-server-dom-turbopack (NPM):
Affected version(s) >=19.0.0-beta-9d76c954cf-20240510 <19.0.9 || >=19.0.0-rc-a7d1240c-20240731 <19.0.9 || >=19.0.1 <19.0.9
Fix Suggestion:
Update to version 19.0.9
react-server-dom-turbopack (NPM):
Affected version(s) >=19.2.0 <19.2.9
Fix Suggestion:
Update to version 19.2.9
react-server-dom-webpack (NPM):
Affected version(s) >=19.1.0 <19.1.10
Fix Suggestion:
Update to version 19.1.10
react-server-dom-webpack (NPM):
Affected version(s) =19.3.0-canary-95ffd6cd-20260205 <19.3.1 || =19.3.0-canary-b07aa7d6-20260209 <19.3.1 || =19.3.0-canary-561ed529-20260423 <19.3.1 || =19.3.0-canary-e2731312-20260630 <19.3.1 || =19.3.0-canary-711c445b-20260722 <19.3.1 || =19.3.0-canary-4f931700-20251029 <19.3.1 || =19.3.0-canary-557e28fa-20260601 <19.3.1 || =19.3.0-canary-f1f7ed2a-20260904 <19.3.1 || =19.3.0-canary-044d56f3-20260330 <19.3.1 || =19.3.0-canary-9724e3e6-20251008 <19.3.1 || =19.3.0-canary-561ee24d-20251101 <19.3.1 || =19.3.0-canary-0972e239-20251118 <19.3.1 || =19.3.0-canary-10680271-20260126 <19.3.1 || =19.3.0-canary-d2908752-20260119 <19.3.1 || =19.3.0-canary-37bcdcde-20251211 <19.3.1 || =19.3.0-canary-c9ddee7e-20251031 <19.3.1 || =19.3.0-canary-d7215b49-20251013 <19.3.1 || =19.3.0-canary-f0dfee38-20260529 <19.3.1 || =19.3.0-canary-8b2e903a-20260320 <19.3.1 || =19.3.0-canary-6c0e1047-20260908 <19.3.1 || =19.3.0-canary-3f0b9e61-20260317 <19.3.1 || =19.3.0-canary-e0cc7202-20260227 <19.3.1 || =19.3.0-canary-756fdd47-20260727 <19.3.1 || =19.3.0-canary-a4eb2dfa-20251006 <19.3.1 || =19.3.0-canary-fb2177c1-20251114 <19.3.1 || =19.3.0-canary-8c34556c-20260126 <19.3.1 || =19.3.0-canary-74568e86-20260328 <19.3.1 || =19.3.0-canary-d763f313-20251210 <19.3.1 || =19.3.0-canary-8b0da1c6-20260922 <19.3.1 || =19.3.0-canary-58bdc0bb-20251019 <19.3.1 || =19.3.0-canary-fef12a01-20260413 <19.3.1 || =19.3.0-canary-56e84692-20251014 <19.3.1 || =19.3.0-canary-8425b691-20260904 <19.3.1 || =19.3.0-canary-4fdf7cf2-20251003 <19.3.1 || =19.3.0-canary-da641178-20260129 <19.3.1 || =19.3.0-canary-eb89912e-20251118 <19.3.1 || =19.3.0-canary-75b0945b-20260526 <19.3.1 || =19.3.0-canary-c7862584-20251006 <19.3.1 || =19.3.0-canary-5a2205ba-20251105 <19.3.1 || =19.3.0-canary-83840902-20260719 <19.3.1 || =19.3.0-canary-705268dc-20260409 <19.3.1 || =19.3.0-canary-142cfde8-20260422 <19.3.1 || =19.3.0-canary-ff8f88fc-20260915 <19.3.1 || =19.3.0-canary-eafeac09-20260819 <19.3.1 || =19.3.0-canary-1d34f91d-20260909 <19.3.1 || =19.3.0-canary-85c427d8-20251003 <19.3.1 || =19.3.0-canary-9635257c-20260502 <19.3.1 || =19.3.0-canary-3e319a94-20260126 <19.3.1 || =19.3.0-canary-93f85932-20251016 <19.3.1 || =19.3.0-canary-5e9eedb5-20260312 <19.3.1 || =19.3.0-canary-f4e439e1-20260902 <19.3.1 || =19.3.0-canary-bb8a76c6-20260115 <19.3.1 || =19.3.0-canary-b618bbb4-20261007 <19.3.1 || =19.3.0-canary-5f2b5718-20251014 <19.3.1 || =19.3.0-canary-ec61f187-20260806 <19.3.1 || =19.3.0-canary-43bcbf80-20260603 <19.3.1 || =19.3.0-canary-07dde64d-20261013 <19.3.1 || =19.3.0-canary-bd6ea412-20260824 <19.3.1 || =19.3.0-canary-c0d218f0-20260324 <19.3.1 || =19.3.0-canary-c137dd6f-20260204 <19.3.1 || =19.3.0-canary-4b3e662e-20251008 <19.3.1 || =19.3.0-canary-93fc5740-20251113 <19.3.1 || =19.3.0-canary-03ca38e6-20260213 <19.3.1 || =19.3.0-canary-2bcbf254-20251020 <19.3.1 || =19.3.0-canary-b45bb335-20251211 <19.3.1 || =19.3.0-canary-100fc4a8-20251110 <19.3.1 || =19.3.0-canary-28cd4bb0-20260723 <19.3.1 || =19.3.0-canary-3bc2d414-20260304 <19.3.1 || =19.3.0-canary-65eec428-20251218 <19.3.1 || =19.3.0-canary-fd524fe0-20251121 <19.3.1 || =19.3.0-canary-8a830737-20260113 <19.3.1 || =19.3.0-canary-172742b4-20260716 <19.3.1 || =19.3.0-canary-e730b5e6-20260612 <19.3.1 || =19.3.0-canary-06fcc8f3-20251009 <19.3.1 || =19.3.0-canary-bcf97c75-20251215 <19.3.1 || =19.3.0-canary-2dc7da79-20260828 <19.3.1 || =19.3.0-canary-b546603b-20260121 <19.3.1 || =19.3.0-canary-2ba30655-20260219 <19.3.1 || =19.3.0-canary-cbb046ab-20260731 <19.3.1 || =19.3.0-canary-3a2bee26-20260218 <19.3.1 || =19.3.0-canary-f93b9fd4-20251217 <19.3.1 || =19.3.0-canary-230772f9-20260128 <19.3.1 || =19.3.0-canary-bfb7a768-20260811 <19.3.1 || =19.3.0-canary-55480b4d-20251208 <19.3.1 || =19.3.0-canary-d75b0697-20261006 <19.3.1 || =19.3.0-canary-24d8716e-20260123 <19.3.1 || =19.3.0-canary-9627b5a1-20260327 <19.3.1 || =19.3.0-canary-c0060cf2-20260224 <19.3.1 || =19.3.0-canary-23def8fd-20260706 <19.3.1 || =19.3.0-canary-4a3d993e-20260114 <19.3.1 || =19.3.0-canary-6066c782-20260212 <19.3.1 || =19.3.0-canary-6a0ab4d2-20260121 <19.3.1 || =19.3.0-canary-88ee1f59-20251215 <19.3.1 || =19.3.0-canary-95f4603e-20260716 <19.3.1 || =19.3.0-canary-d9f4e76b-20260903 <19.3.1 || =19.3.0-canary-6160773f-20251023 <19.3.1 || =19.3.0-canary-46103596-20260305 <19.3.1 || =19.3.0-canary-4842fbea-20260217 <19.3.1 || =19.3.0-canary-e92ecef2-20260618 <19.3.1 || =19.3.0-canary-3e00319b-20260203 <19.3.1 || =19.3.0-canary-272441a9-20260209 <19.3.1 || =19.3.0-canary-eb8feb71-20260814 <19.3.1 || =19.3.0-canary-56824423-20260414 <19.3.1 || =19.3.0-canary-019019be-20260911 <19.3.1 || =19.3.0-canary-247fbb45-20260622 <19.3.1 || =19.3.0-canary-f6a48828-20251019 <19.3.1 || =19.3.0-canary-6cb4322d-20260729 <19.3.1 || =19.3.0-canary-2dd9b7cf-20260208 <19.3.1 || =19.3.0-canary-1324e1bb-20251016 <19.3.1 || =19.3.0-canary-d6cae440-20260106 <19.3.1 || =19.3.0-canary-900ae094-20260605 <19.3.1 || =19.3.0-canary-c80a0750-20260312 <19.3.1 || =19.3.0-canary-9f2e1f88-20261012 <19.3.1 || =19.3.0-canary-dbc37501-20260612 <19.3.1 || =19.3.0-canary-47d1ad14-20260216 <19.3.1 || =19.3.0-canary-fa50caf5-20251107 <19.3.1 || =19.3.0-canary-8ac5f4eb-20251119 <19.3.1 || =19.3.0-canary-b740af25-20260715 <19.3.1 || =19.3.0-canary-404b38c7-20260408 <19.3.1 || =19.3.0-canary-d9158919-20260615 <19.3.1 || =19.3.0-canary-a7cce7b3-20260617 <19.3.1 || =19.3.0-canary-bef88f7c-20260116 <19.3.1 || =19.3.0-canary-ab18f33d-20260220 <19.3.1 || =19.3.0-canary-3508aee6-20260702 <19.3.1 || =19.3.0-canary-52912a14-20260625 <19.3.1 || =19.3.0-canary-f789f203-20260825 <19.3.1 || =19.3.0-canary-82c44beb-20260910 <19.3.1 || =19.3.0-canary-66ae640b-20251204 <19.3.1 || =19.3.0-canary-98ce535f-20260226 <19.3.1 || =19.3.0-canary-e71a6393-20260702 <19.3.1 || =19.3.0-canary-40b4a5bf-20251120 <19.3.1 || =19.3.0-canary-3a0ab8a7-20251029 <19.3.1 || =19.3.0-canary-99e86060-20260623 <19.3.1 || =19.3.0-canary-e33071c6-20260224 <19.3.1 || =19.3.0-canary-b1786c31-20260618 <19.3.1 || =19.3.0-canary-257b033f-20251113 <19.3.1 || =19.3.0-canary-5aec1b2a-20260110 <19.3.1 || =19.3.0-canary-1b45e243-20260402 <19.3.1 || =19.3.0-canary-80b1cab3-20260331 <19.3.1 || =19.3.0-canary-ad5dfc82-20260427 <19.3.1 || =19.3.0-canary-7c6ac13e-20260929 <19.3.1 || =19.3.0-canary-80cb7a99-20251211 <19.3.1 || =19.3.0-canary-59aff3e1-20260918 <19.3.1 || =19.3.0-canary-b061b597-20251212 <19.3.1 || =19.3.0-canary-a1124489-20260826 <19.3.1 || =19.3.0 <19.3.1 || =19.3.0-canary-a757cb76-20251002 <19.3.1 || =19.3.0-canary-d5736f09-20260507 <19.3.1 || =19.3.0-canary-52684925-20251110 <19.3.1 || =19.3.0-canary-378973b3-20251205 <19.3.1 || =19.3.0-canary-4cc5b7a9-20260303 <19.3.1 || =19.3.0-canary-1724e9ce-20260729 <19.3.1 || =19.3.0-canary-12a4baec-20260707 <19.3.1 || =19.3.0-canary-67f7d47a-20251103 <19.3.1 || =19.3.0-canary-7023f501-20260714 <19.3.1 || =19.3.0-canary-ec9cc003-20251208 <19.3.1 || =19.3.0-canary-87ae75b3-20260128 <19.3.1 || =19.3.0-canary-6b5ea125-20260528 <19.3.1 || =19.3.0-canary-5123b063-20260708 <19.3.1 || =19.3.0-canary-63e95c2b-20260603 <19.3.1 || =19.3.0-canary-ff7445e6-20260831 <19.3.1 || =19.3.0-canary-408b38ef-20251023 <19.3.1 || =19.3.0-canary-ed4bd540-20260202 <19.3.1 || =19.3.0-canary-f4e0d4ed-20260429 <19.3.1 || =19.3.0-canary-2b19aecd-20260916 <19.3.1 || =19.3.0-canary-9b938532-20260914 <19.3.1 || =19.3.0-canary-278794d7-20261002 <19.3.1 || =19.3.0-canary-7dc903cd-20251203 <19.3.1 || =19.3.0-canary-81e442ea-20260721 <19.3.1 || =19.3.0-canary-1873ad79-20251015 <19.3.1 || =19.3.0-canary-29d9d318-20260826 <19.3.1 || =19.3.0-canary-c0cd4d5d-20260527 <19.3.1 || =19.3.0-canary-65db1000-20260206 <19.3.1 || =19.3.0-canary-3cb2c420-20260324 <19.3.1 || =19.3.0-canary-b1533b03-20260203 <19.3.1 || =19.3.0-canary-00f063c3-20260415 <19.3.1 || =19.3.0-canary-09f05694-20251201 <19.3.1 || =19.3.0-canary-94643c3b-20260421 <19.3.1 || =19.3.0-canary-71b3a03c-20251021 <19.3.1 || =19.3.0-canary-ed69815c-20260323 <19.3.1 || =19.3.0-canary-ead92181-20251010 <19.3.1 || =19.3.0-canary-1ea46df8-20251111 <19.3.1 || =19.3.0-canary-beef6d60-20260813 <19.3.1 || =19.3.0-canary-dd048c3b-20251105 <19.3.1 || =19.3.0-canary-96fcba90-20260728 <19.3.1 || =19.3.0-canary-b4546cd0-20260318 <19.3.1 || =19.3.0-canary-3025aa39-20251007 <19.3.1 || =19.3.0-canary-f646e8ff-20251104 <19.3.1 || =19.3.0-canary-ec0fca31-20260701 <19.3.1 || =19.3.0-canary-7dfc7ccd-20260803 <19.3.1 || =19.3.0-canary-3e1abcc8-20260113 <19.3.1 || =19.3.0-canary-da9325b5-20260417 <19.3.1 || =19.3.0-canary-807d21fd-20260810 <19.3.1 || =19.3.0-canary-22e4f993-20260811 <19.3.1 || =19.3.0-canary-92f4fda3-20260629 <19.3.1 || =19.3.0-canary-11eddecd-20260805 <19.3.1 || =19.3.0-canary-41b3e9a6-20260119 <19.3.1 || =19.3.0-canary-c0c39a6b-20260709 <19.3.1 || =19.3.0-canary-df4bd1b4-20260708 <19.3.1 || =19.3.0-canary-b4455a6e-20251027 <19.3.1 || =19.3.0-canary-093b3246-20251113 <19.3.1 || =19.3.0-canary-ad78e251-20260616 <19.3.1 || =19.3.0-canary-17eca7b0-20261006 <19.3.1 || =19.3.0-canary-bb533877-20260205 <19.3.1 || =19.3.0-canary-68631c04-20260626 <19.3.1 || =19.3.0-canary-0f42eac2-20260730 <19.3.1 || =19.3.0-canary-d083ec1d-20260922 <19.3.1 || =19.3.0-canary-dd453071-20260506 <19.3.1 || =19.3.0-canary-e8c63626-20260213 <19.3.1 || =19.3.0-canary-21c89c9f-20260901 <19.3.1
Fix Suggestion:
Update to version 19.3.1
react-server-dom-parcel (NPM):
Affected version(s) >=19.1.0 <19.1.10
Fix Suggestion:
Update to version 19.1.10
react-server-dom-parcel (NPM):
Affected version(s) =19.3.0-canary-95ffd6cd-20260205 <19.3.1 || =19.3.0-canary-b07aa7d6-20260209 <19.3.1 || =19.3.0-canary-561ed529-20260423 <19.3.1 || =19.3.0-canary-e2731312-20260630 <19.3.1 || =19.3.0-canary-711c445b-20260722 <19.3.1 || =19.3.0-canary-4f931700-20251029 <19.3.1 || =19.3.0-canary-557e28fa-20260601 <19.3.1 || =19.3.0-canary-f1f7ed2a-20260904 <19.3.1 || =19.3.0-canary-044d56f3-20260330 <19.3.1 || =19.3.0-canary-9724e3e6-20251008 <19.3.1 || =19.3.0-canary-561ee24d-20251101 <19.3.1 || =19.3.0-canary-0972e239-20251118 <19.3.1 || =19.3.0-canary-10680271-20260126 <19.3.1 || =19.3.0-canary-d2908752-20260119 <19.3.1 || =19.3.0-canary-37bcdcde-20251211 <19.3.1 || =19.3.0-canary-c9ddee7e-20251031 <19.3.1 || =19.3.0-canary-d7215b49-20251013 <19.3.1 || =19.3.0-canary-f0dfee38-20260529 <19.3.1 || =19.3.0-canary-8b2e903a-20260320 <19.3.1 || =19.3.0-canary-6c0e1047-20260908 <19.3.1 || =19.3.0-canary-3f0b9e61-20260317 <19.3.1 || =19.3.0-canary-e0cc7202-20260227 <19.3.1 || =19.3.0-canary-756fdd47-20260727 <19.3.1 || =19.3.0-canary-a4eb2dfa-20251006 <19.3.1 || =19.3.0-canary-fb2177c1-20251114 <19.3.1 || =19.3.0-canary-8c34556c-20260126 <19.3.1 || =19.3.0-canary-74568e86-20260328 <19.3.1 || =19.3.0-canary-d763f313-20251210 <19.3.1 || =19.3.0-canary-8b0da1c6-20260922 <19.3.1 || =19.3.0-canary-58bdc0bb-20251019 <19.3.1 || =19.3.0-canary-fef12a01-20260413 <19.3.1 || =19.3.0-canary-56e84692-20251014 <19.3.1 || =19.3.0-canary-8425b691-20260904 <19.3.1 || =19.3.0-canary-4fdf7cf2-20251003 <19.3.1 || =19.3.0-canary-da641178-20260129 <19.3.1 || =19.3.0-canary-eb89912e-20251118 <19.3.1 || =19.3.0-canary-75b0945b-20260526 <19.3.1 || =19.3.0-canary-c7862584-20251006 <19.3.1 || =19.3.0-canary-5a2205ba-20251105 <19.3.1 || =19.3.0-canary-83840902-20260719 <19.3.1 || =19.3.0-canary-705268dc-20260409 <19.3.1 || =19.3.0-canary-142cfde8-20260422 <19.3.1 || =19.3.0-canary-ff8f88fc-20260915 <19.3.1 || =19.3.0-canary-eafeac09-20260819 <19.3.1 || =19.3.0-canary-1d34f91d-20260909 <19.3.1 || =19.3.0-canary-85c427d8-20251003 <19.3.1 || =19.3.0-canary-9635257c-20260502 <19.3.1 || =19.3.0-canary-3e319a94-20260126 <19.3.1 || =19.3.0-canary-93f85932-20251016 <19.3.1 || =19.3.0-canary-5e9eedb5-20260312 <19.3.1 || =19.3.0-canary-f4e439e1-20260902 <19.3.1 || =19.3.0-canary-bb8a76c6-20260115 <19.3.1 || =19.3.0-canary-b618bbb4-20261007 <19.3.1 || =19.3.0-canary-5f2b5718-20251014 <19.3.1 || =19.3.0-canary-ec61f187-20260806 <19.3.1 || =19.3.0-canary-43bcbf80-20260603 <19.3.1 || =19.3.0-canary-07dde64d-20261013 <19.3.1 || =19.3.0-canary-bd6ea412-20260824 <19.3.1 || =19.3.0-canary-c0d218f0-20260324 <19.3.1 || =19.3.0-canary-c137dd6f-20260204 <19.3.1 || =19.3.0-canary-4b3e662e-20251008 <19.3.1 || =19.3.0-canary-93fc5740-20251113 <19.3.1 || =19.3.0-canary-03ca38e6-20260213 <19.3.1 || =19.3.0-canary-2bcbf254-20251020 <19.3.1 || =19.3.0-canary-b45bb335-20251211 <19.3.1 || =19.3.0-canary-100fc4a8-20251110 <19.3.1 || =19.3.0-canary-28cd4bb0-20260723 <19.3.1 || =19.3.0-canary-3bc2d414-20260304 <19.3.1 || =19.3.0-canary-65eec428-20251218 <19.3.1 || =19.3.0-canary-fd524fe0-20251121 <19.3.1 || =19.3.0-canary-8a830737-20260113 <19.3.1 || =19.3.0-canary-172742b4-20260716 <19.3.1 || =19.3.0-canary-e730b5e6-20260612 <19.3.1 || =19.3.0-canary-06fcc8f3-20251009 <19.3.1 || =19.3.0-canary-bcf97c75-20251215 <19.3.1 || =19.3.0-canary-2dc7da79-20260828 <19.3.1 || =19.3.0-canary-b546603b-20260121 <19.3.1 || =19.3.0-canary-2ba30655-20260219 <19.3.1 || =19.3.0-canary-cbb046ab-20260731 <19.3.1 || =19.3.0-canary-3a2bee26-20260218 <19.3.1 || =19.3.0-canary-f93b9fd4-20251217 <19.3.1 || =19.3.0-canary-230772f9-20260128 <19.3.1 || =19.3.0-canary-bfb7a768-20260811 <19.3.1 || =19.3.0-canary-55480b4d-20251208 <19.3.1 || =19.3.0-canary-d75b0697-20261006 <19.3.1 || =19.3.0-canary-24d8716e-20260123 <19.3.1 || =19.3.0-canary-9627b5a1-20260327 <19.3.1 || =19.3.0-canary-c0060cf2-20260224 <19.3.1 || =19.3.0-canary-23def8fd-20260706 <19.3.1 || =19.3.0-canary-4a3d993e-20260114 <19.3.1 || =19.3.0-canary-6066c782-20260212 <19.3.1 || =19.3.0-canary-6a0ab4d2-20260121 <19.3.1 || =19.3.0-canary-88ee1f59-20251215 <19.3.1 || =19.3.0-canary-95f4603e-20260716 <19.3.1 || =19.3.0-canary-d9f4e76b-20260903 <19.3.1 || =19.3.0-canary-6160773f-20251023 <19.3.1 || =19.3.0-canary-46103596-20260305 <19.3.1 || =19.3.0-canary-4842fbea-20260217 <19.3.1 || =19.3.0-canary-e92ecef2-20260618 <19.3.1 || =19.3.0-canary-3e00319b-20260203 <19.3.1 || =19.3.0-canary-272441a9-20260209 <19.3.1 || =19.3.0-canary-eb8feb71-20260814 <19.3.1 || =19.3.0-canary-56824423-20260414 <19.3.1 || =19.3.0-canary-019019be-20260911 <19.3.1 || =19.3.0-canary-247fbb45-20260622 <19.3.1 || =19.3.0-canary-f6a48828-20251019 <19.3.1 || =19.3.0-canary-6cb4322d-20260729 <19.3.1 || =19.3.0-canary-2dd9b7cf-20260208 <19.3.1 || =19.3.0-canary-1324e1bb-20251016 <19.3.1 || =19.3.0-canary-d6cae440-20260106 <19.3.1 || =19.3.0-canary-900ae094-20260605 <19.3.1 || =19.3.0-canary-c80a0750-20260312 <19.3.1 || =19.3.0-canary-9f2e1f88-20261012 <19.3.1 || =19.3.0-canary-dbc37501-20260612 <19.3.1 || =19.3.0-canary-47d1ad14-20260216 <19.3.1 || =19.3.0-canary-fa50caf5-20251107 <19.3.1 || =19.3.0-canary-8ac5f4eb-20251119 <19.3.1 || =19.3.0-canary-b740af25-20260715 <19.3.1 || =19.3.0-canary-404b38c7-20260408 <19.3.1 || =19.3.0-canary-d9158919-20260615 <19.3.1 || =19.3.0-canary-a7cce7b3-20260617 <19.3.1 || =19.3.0-canary-bef88f7c-20260116 <19.3.1 || =19.3.0-canary-ab18f33d-20260220 <19.3.1 || =19.3.0-canary-3508aee6-20260702 <19.3.1 || =19.3.0-canary-52912a14-20260625 <19.3.1 || =19.3.0-canary-f789f203-20260825 <19.3.1 || =19.3.0-canary-82c44beb-20260910 <19.3.1 || =19.3.0-canary-66ae640b-20251204 <19.3.1 || =19.3.0-canary-98ce535f-20260226 <19.3.1 || =19.3.0-canary-e71a6393-20260702 <19.3.1 || =19.3.0-canary-40b4a5bf-20251120 <19.3.1 || =19.3.0-canary-3a0ab8a7-20251029 <19.3.1 || =19.3.0-canary-99e86060-20260623 <19.3.1 || =19.3.0-canary-e33071c6-20260224 <19.3.1 || =19.3.0-canary-b1786c31-20260618 <19.3.1 || =19.3.0-canary-257b033f-20251113 <19.3.1 || =19.3.0-canary-5aec1b2a-20260110 <19.3.1 || =19.3.0-canary-1b45e243-20260402 <19.3.1 || =19.3.0-canary-80b1cab3-20260331 <19.3.1 || =19.3.0-canary-ad5dfc82-20260427 <19.3.1 || =19.3.0-canary-7c6ac13e-20260929 <19.3.1 || =19.3.0-canary-80cb7a99-20251211 <19.3.1 || =19.3.0-canary-59aff3e1-20260918 <19.3.1 || =19.3.0-canary-b061b597-20251212 <19.3.1 || =19.3.0-canary-a1124489-20260826 <19.3.1 || =19.3.0 <19.3.1 || =19.3.0-canary-a757cb76-20251002 <19.3.1 || =19.3.0-canary-d5736f09-20260507 <19.3.1 || =19.3.0-canary-52684925-20251110 <19.3.1 || =19.3.0-canary-378973b3-20251205 <19.3.1 || =19.3.0-canary-4cc5b7a9-20260303 <19.3.1 || =19.3.0-canary-1724e9ce-20260729 <19.3.1 || =19.3.0-canary-12a4baec-20260707 <19.3.1 || =19.3.0-canary-67f7d47a-20251103 <19.3.1 || =19.3.0-canary-7023f501-20260714 <19.3.1 || =19.3.0-canary-ec9cc003-20251208 <19.3.1 || =19.3.0-canary-87ae75b3-20260128 <19.3.1 || =19.3.0-canary-6b5ea125-20260528 <19.3.1 || =19.3.0-canary-5123b063-20260708 <19.3.1 || =19.3.0-canary-63e95c2b-20260603 <19.3.1 || =19.3.0-canary-ff7445e6-20260831 <19.3.1 || =19.3.0-canary-408b38ef-20251023 <19.3.1 || =19.3.0-canary-ed4bd540-20260202 <19.3.1 || =19.3.0-canary-f4e0d4ed-20260429 <19.3.1 || =19.3.0-canary-2b19aecd-20260916 <19.3.1 || =19.3.0-canary-9b938532-20260914 <19.3.1 || =19.3.0-canary-278794d7-20261002 <19.3.1 || =19.3.0-canary-7dc903cd-20251203 <19.3.1 || =19.3.0-canary-81e442ea-20260721 <19.3.1 || =19.3.0-canary-1873ad79-20251015 <19.3.1 || =19.3.0-canary-29d9d318-20260826 <19.3.1 || =19.3.0-canary-c0cd4d5d-20260527 <19.3.1 || =19.3.0-canary-65db1000-20260206 <19.3.1 || =19.3.0-canary-3cb2c420-20260324 <19.3.1 || =19.3.0-canary-b1533b03-20260203 <19.3.1 || =19.3.0-canary-00f063c3-20260415 <19.3.1 || =19.3.0-canary-09f05694-20251201 <19.3.1 || =19.3.0-canary-94643c3b-20260421 <19.3.1 || =19.3.0-canary-71b3a03c-20251021 <19.3.1 || =19.3.0-canary-ed69815c-20260323 <19.3.1 || =19.3.0-canary-ead92181-20251010 <19.3.1 || =19.3.0-canary-1ea46df8-20251111 <19.3.1 || =19.3.0-canary-beef6d60-20260813 <19.3.1 || =19.3.0-canary-dd048c3b-20251105 <19.3.1 || =19.3.0-canary-96fcba90-20260728 <19.3.1 || =19.3.0-canary-b4546cd0-20260318 <19.3.1 || =19.3.0-canary-3025aa39-20251007 <19.3.1 || =19.3.0-canary-f646e8ff-20251104 <19.3.1 || =19.3.0-canary-ec0fca31-20260701 <19.3.1 || =19.3.0-canary-7dfc7ccd-20260803 <19.3.1 || =19.3.0-canary-3e1abcc8-20260113 <19.3.1 || =19.3.0-canary-da9325b5-20260417 <19.3.1 || =19.3.0-canary-807d21fd-20260810 <19.3.1 || =19.3.0-canary-22e4f993-20260811 <19.3.1 || =19.3.0-canary-92f4fda3-20260629 <19.3.1 || =19.3.0-canary-11eddecd-20260805 <19.3.1 || =19.3.0-canary-41b3e9a6-20260119 <19.3.1 || =19.3.0-canary-c0c39a6b-20260709 <19.3.1 || =19.3.0-canary-df4bd1b4-20260708 <19.3.1 || =19.3.0-canary-b4455a6e-20251027 <19.3.1 || =19.3.0-canary-093b3246-20251113 <19.3.1 || =19.3.0-canary-ad78e251-20260616 <19.3.1 || =19.3.0-canary-17eca7b0-20261006 <19.3.1 || =19.3.0-canary-bb533877-20260205 <19.3.1 || =19.3.0-canary-68631c04-20260626 <19.3.1 || =19.3.0-canary-0f42eac2-20260730 <19.3.1 || =19.3.0-canary-d083ec1d-20260922 <19.3.1 || =19.3.0-canary-dd453071-20260506 <19.3.1 || =19.3.0-canary-e8c63626-20260213 <19.3.1 || =19.3.0-canary-21c89c9f-20260901 <19.3.1
Fix Suggestion:
Update to version 19.3.1
react-server-dom-parcel (NPM):
Affected version(s) >=19.2.0 <19.2.9
Fix Suggestion:
Update to version 19.2.9
react-server-dom-webpack (NPM):
Affected version(s) >=19.0.1 <19.0.9 || >=19.0.0-rc-a7d1240c-20240731 <19.0.9 || >=19.0.0-beta-9d76c954cf-20240510 <19.0.9
Fix Suggestion:
Update to version 19.0.9
react-server-dom-turbopack (NPM):
Affected version(s) =19.3.0-canary-fd524fe0-20251121 <19.3.1 || =19.3.0-canary-80cb7a99-20251211 <19.3.1 || =19.3.0-canary-beef6d60-20260813 <19.3.1 || =19.3.0-canary-cbb046ab-20260731 <19.3.1 || =19.3.0-canary-99e86060-20260623 <19.3.1 || =19.3.0-canary-257b033f-20251113 <19.3.1 || =19.3.0-canary-65eec428-20251218 <19.3.1 || =19.3.0-canary-a1124489-20260826 <19.3.1 || =19.3.0-canary-4b3e662e-20251008 <19.3.1 || =19.3.0-canary-4a3d993e-20260114 <19.3.1 || =19.3.0-canary-6160773f-20251023 <19.3.1 || =19.3.0-canary-272441a9-20260209 <19.3.1 || =19.3.0-canary-408b38ef-20251023 <19.3.1 || =19.3.0-canary-ad5dfc82-20260427 <19.3.1 || =19.3.0-canary-c0d218f0-20260324 <19.3.1 || =19.3.0-canary-eafeac09-20260819 <19.3.1 || =19.3.0-canary-e33071c6-20260224 <19.3.1 || =19.3.0-canary-bfb7a768-20260811 <19.3.1 || =19.3.0-canary-93f85932-20251016 <19.3.1 || =19.3.0-canary-59aff3e1-20260918 <19.3.1 || =19.3.0-canary-5aec1b2a-20260110 <19.3.1 || =19.3.0-canary-093b3246-20251113 <19.3.1 || =19.3.0-canary-88ee1f59-20251215 <19.3.1 || =19.3.0-canary-c80a0750-20260312 <19.3.1 || =19.3.0-canary-23def8fd-20260706 <19.3.1 || =19.3.0-canary-6066c782-20260212 <19.3.1 || =19.3.0-canary-b740af25-20260715 <19.3.1 || =19.3.0-canary-63e95c2b-20260603 <19.3.1 || =19.3.0-canary-71b3a03c-20251021 <19.3.1 || =19.3.0-canary-1d34f91d-20260909 <19.3.1 || =19.3.0-canary-4cc5b7a9-20260303 <19.3.1 || =19.3.0-canary-12a4baec-20260707 <19.3.1 || =19.3.0-canary-6cb4322d-20260729 <19.3.1 || =19.3.0-canary-019019be-20260911 <19.3.1 || =19.3.0-canary-56824423-20260414 <19.3.1 || =19.3.0-canary-67f7d47a-20251103 <19.3.1 || =19.3.0-canary-7023f501-20260714 <19.3.1 || =19.3.0-canary-1873ad79-20251015 <19.3.1 || =19.3.0-canary-c0060cf2-20260224 <19.3.1 || =19.3.0-canary-5e9eedb5-20260312 <19.3.1 || =19.3.0-canary-29d9d318-20260826 <19.3.1 || =19.3.0-canary-2dd9b7cf-20260208 <19.3.1 || =19.3.0-canary-40b4a5bf-20251120 <19.3.1 || =19.3.0-canary-82c44beb-20260910 <19.3.1 || =19.3.0-canary-81e442ea-20260721 <19.3.1 || =19.3.0-canary-3508aee6-20260702 <19.3.1 || =19.3.0-canary-65db1000-20260206 <19.3.1 || =19.3.0-canary-f789f203-20260825 <19.3.1 || =19.3.0-canary-06fcc8f3-20251009 <19.3.1 || =19.3.0-canary-00f063c3-20260415 <19.3.1 || =19.3.0-canary-8ac5f4eb-20251119 <19.3.1 || =19.3.0-canary-b45bb335-20251211 <19.3.1 || =19.3.0-canary-9f2e1f88-20261012 <19.3.1 || =19.3.0-canary-28cd4bb0-20260723 <19.3.1 || =19.3.0-canary-d9158919-20260615 <19.3.1 || =19.3.0-canary-66ae640b-20251204 <19.3.1 || =19.3.0-canary-83840902-20260719 <19.3.1 || =19.3.0-canary-4842fbea-20260217 <19.3.1 || =19.3.0-canary-e71a6393-20260702 <19.3.1 || =19.3.0-canary-e92ecef2-20260618 <19.3.1 || =19.3.0-canary-7c6ac13e-20260929 <19.3.1 || =19.3.0-canary-52912a14-20260625 <19.3.1 || =19.3.0-canary-d7215b49-20251013 <19.3.1 || =19.3.0-canary-6a0ab4d2-20260121 <19.3.1 || =19.3.0-canary-711c445b-20260722 <19.3.1 || =19.3.0-canary-80b1cab3-20260331 <19.3.1 || =19.3.0-canary-1324e1bb-20251016 <19.3.1 || =19.3.0 <19.3.1 || =19.3.0-canary-900ae094-20260605 <19.3.1 || =19.3.0-canary-044d56f3-20260330 <19.3.1 || =19.3.0-canary-557e28fa-20260601 <19.3.1 || =19.3.0-canary-a757cb76-20251002 <19.3.1 || =19.3.0-canary-fa50caf5-20251107 <19.3.1 || =19.3.0-canary-f1f7ed2a-20260904 <19.3.1 || =19.3.0-canary-3e00319b-20260203 <19.3.1 || =19.3.0-canary-f93b9fd4-20251217 <19.3.1 || =19.3.0-canary-b546603b-20260121 <19.3.1 || =19.3.0-canary-4fdf7cf2-20251003 <19.3.1 || =19.3.0-canary-eb8feb71-20260814 <19.3.1 || =19.3.0-canary-2ba30655-20260219 <19.3.1 || =19.3.0-canary-230772f9-20260128 <19.3.1 || =19.3.0-canary-3a2bee26-20260218 <19.3.1 || =19.3.0-canary-bb8a76c6-20260115 <19.3.1 || =19.3.0-canary-dbc37501-20260612 <19.3.1 || =19.3.0-canary-b618bbb4-20261007 <19.3.1 || =19.3.0-canary-3f0b9e61-20260317 <19.3.1 || =19.3.0-canary-07dde64d-20261013 <19.3.1 || =19.3.0-canary-47d1ad14-20260216 <19.3.1 || =19.3.0-canary-404b38c7-20260408 <19.3.1 || =19.3.0-canary-8425b691-20260904 <19.3.1 || =19.3.0-canary-da641178-20260129 <19.3.1 || =19.3.0-canary-b061b597-20251212 <19.3.1 || =19.3.0-canary-8a830737-20260113 <19.3.1 || =19.3.0-canary-8b2e903a-20260320 <19.3.1 || =19.3.0-canary-e730b5e6-20260612 <19.3.1 || =19.3.0-canary-3e319a94-20260126 <19.3.1 || =19.3.0-canary-fb2177c1-20251114 <19.3.1 || =19.3.0-canary-58bdc0bb-20251019 <19.3.1 || =19.3.0-canary-3a0ab8a7-20251029 <19.3.1 || =19.3.0-canary-03ca38e6-20260213 <19.3.1 || =19.3.0-canary-5f2b5718-20251014 <19.3.1 || =19.3.0-canary-ec61f187-20260806 <19.3.1 || =19.3.0-canary-f4e439e1-20260902 <19.3.1 || =19.3.0-canary-37bcdcde-20251211 <19.3.1 || =19.3.0-canary-a7cce7b3-20260617 <19.3.1 || =19.3.0-canary-7dfc7ccd-20260803 <19.3.1 || =19.3.0-canary-94643c3b-20260421 <19.3.1 || =19.3.0-canary-c7862584-20251006 <19.3.1 || =19.3.0-canary-3cb2c420-20260324 <19.3.1 || =19.3.0-canary-46103596-20260305 <19.3.1 || =19.3.0-canary-bcf97c75-20251215 <19.3.1 || =19.3.0-canary-b1533b03-20260203 <19.3.1 || =19.3.0-canary-fef12a01-20260413 <19.3.1 || =19.3.0-canary-2bcbf254-20251020 <19.3.1 || =19.3.0-canary-2b19aecd-20260916 <19.3.1 || =19.3.0-canary-dd048c3b-20251105 <19.3.1 || =19.3.0-canary-756fdd47-20260727 <19.3.1 || =19.3.0-canary-7dc903cd-20251203 <19.3.1 || =19.3.0-canary-74568e86-20260328 <19.3.1 || =19.3.0-canary-100fc4a8-20251110 <19.3.1 || =19.3.0-canary-93fc5740-20251113 <19.3.1 || =19.3.0-canary-8c34556c-20260126 <19.3.1 || =19.3.0-canary-e8c63626-20260213 <19.3.1 || =19.3.0-canary-3e1abcc8-20260113 <19.3.1 || =19.3.0-canary-43bcbf80-20260603 <19.3.1 || =19.3.0-canary-d763f313-20251210 <19.3.1 || =19.3.0-canary-142cfde8-20260422 <19.3.1 || =19.3.0-canary-ff8f88fc-20260915 <19.3.1 || =19.3.0-canary-f4e0d4ed-20260429 <19.3.1 || =19.3.0-canary-a4eb2dfa-20251006 <19.3.1 || =19.3.0-canary-85c427d8-20251003 <19.3.1 || =19.3.0-canary-9635257c-20260502 <19.3.1 || =19.3.0-canary-b4455a6e-20251027 <19.3.1 || =19.3.0-canary-ad78e251-20260616 <19.3.1 || =19.3.0-canary-eb89912e-20251118 <19.3.1 || =19.3.0-canary-24d8716e-20260123 <19.3.1 || =19.3.0-canary-9627b5a1-20260327 <19.3.1 || =19.3.0-canary-95f4603e-20260716 <19.3.1 || =19.3.0-canary-10680271-20260126 <19.3.1 || =19.3.0-canary-d2908752-20260119 <19.3.1 || =19.3.0-canary-5123b063-20260708 <19.3.1 || =19.3.0-canary-c137dd6f-20260204 <19.3.1 || =19.3.0-canary-68631c04-20260626 <19.3.1 || =19.3.0-canary-6c0e1047-20260908 <19.3.1 || =19.3.0-canary-c0cd4d5d-20260527 <19.3.1 || =19.3.0-canary-0f42eac2-20260730 <19.3.1 || =19.3.0-canary-55480b4d-20251208 <19.3.1 || =19.3.0-canary-41b3e9a6-20260119 <19.3.1 || =19.3.0-canary-b07aa7d6-20260209 <19.3.1 || =19.3.0-canary-0972e239-20251118 <19.3.1 || =19.3.0-canary-378973b3-20251205 <19.3.1 || =19.3.0-canary-d75b0697-20261006 <19.3.1 || =19.3.0-canary-d9f4e76b-20260903 <19.3.1 || =19.3.0-canary-f646e8ff-20251104 <19.3.1 || =19.3.0-canary-ec0fca31-20260701 <19.3.1 || =19.3.0-canary-172742b4-20260716 <19.3.1 || =19.3.0-canary-da9325b5-20260417 <19.3.1 || =19.3.0-canary-bd6ea412-20260824 <19.3.1 || =19.3.0-canary-2dc7da79-20260828 <19.3.1 || =19.3.0-canary-ead92181-20251010 <19.3.1 || =19.3.0-canary-e2731312-20260630 <19.3.1 || =19.3.0-canary-3025aa39-20251007 <19.3.1 || =19.3.0-canary-3bc2d414-20260304 <19.3.1 || =19.3.0-canary-11eddecd-20260805 <19.3.1 || =19.3.0-canary-dd453071-20260506 <19.3.1 || =19.3.0-canary-98ce535f-20260226 <19.3.1 || =19.3.0-canary-22e4f993-20260811 <19.3.1 || =19.3.0-canary-c0c39a6b-20260709 <19.3.1 || =19.3.0-canary-ed69815c-20260323 <19.3.1 || =19.3.0-canary-1ea46df8-20251111 <19.3.1 || =19.3.0-canary-9724e3e6-20251008 <19.3.1 || =19.3.0-canary-96fcba90-20260728 <19.3.1 || =19.3.0-canary-bb533877-20260205 <19.3.1 || =19.3.0-canary-bef88f7c-20260116 <19.3.1 || =19.3.0-canary-b4546cd0-20260318 <19.3.1 || =19.3.0-canary-5a2205ba-20251105 <19.3.1 || =19.3.0-canary-21c89c9f-20260901 <19.3.1 || =19.3.0-canary-d083ec1d-20260922 <19.3.1 || =19.3.0-canary-807d21fd-20260810 <19.3.1 || =19.3.0-canary-92f4fda3-20260629 <19.3.1 || =19.3.0-canary-b1786c31-20260618 <19.3.1 || =19.3.0-canary-4f931700-20251029 <19.3.1 || =19.3.0-canary-247fbb45-20260622 <19.3.1 || =19.3.0-canary-df4bd1b4-20260708 <19.3.1 || =19.3.0-canary-17eca7b0-20261006 <19.3.1 || =19.3.0-canary-6b5ea125-20260528 <19.3.1 || =19.3.0-canary-75b0945b-20260526 <19.3.1 || =19.3.0-canary-d5736f09-20260507 <19.3.1 || =19.3.0-canary-705268dc-20260409 <19.3.1 || =19.3.0-canary-ff7445e6-20260831 <19.3.1 || =19.3.0-canary-d6cae440-20260106 <19.3.1 || =19.3.0-canary-ed4bd540-20260202 <19.3.1 || =19.3.0-canary-56e84692-20251014 <19.3.1 || =19.3.0-canary-1724e9ce-20260729 <19.3.1 || =19.3.0-canary-278794d7-20261002 <19.3.1 || =19.3.0-canary-561ed529-20260423 <19.3.1 || =19.3.0-canary-f6a48828-20251019 <19.3.1 || =19.3.0-canary-87ae75b3-20260128 <19.3.1 || =19.3.0-canary-95ffd6cd-20260205 <19.3.1 || =19.3.0-canary-ab18f33d-20260220 <19.3.1 || =19.3.0-canary-1b45e243-20260402 <19.3.1 || =19.3.0-canary-ec9cc003-20251208 <19.3.1 || =19.3.0-canary-e0cc7202-20260227 <19.3.1 || =19.3.0-canary-09f05694-20251201 <19.3.1 || =19.3.0-canary-561ee24d-20251101 <19.3.1 || =19.3.0-canary-9b938532-20260914 <19.3.1 || =19.3.0-canary-52684925-20251110 <19.3.1 || =19.3.0-canary-8b0da1c6-20260922 <19.3.1 || =19.3.0-canary-f0dfee38-20260529 <19.3.1 || =19.3.0-canary-c9ddee7e-20251031 <19.3.1
Fix Suggestion:
Update to version 19.3.1
react-server-dom-webpack (NPM):
Affected version(s) >=19.2.0 <19.2.9
Fix Suggestion:
Update to version 19.2.9
react-server-dom-turbopack (NPM):
Affected version(s) >=19.1.0 <19.1.10
Fix Suggestion:
Update to version 19.1.10
Do you need more information?
Contact Us
CVSS v4
Base Score:
9.5
Attack Vector
NETWORK
Attack Complexity
LOW
Attack Requirements
PRESENT
Privileges Required
NONE
User Interaction
NONE
Vulnerable System Confidentiality
HIGH
Vulnerable System Integrity
HIGH
Vulnerable System Availability
HIGH
Subsequent System Confidentiality
HIGH
Subsequent System Integrity
HIGH
Subsequent System Availability
NONE
CVSS v3
Base Score:
10
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Weakness Type (CWE)
Deserialization of Untrusted Data