Threats tagged 'ghsa-rv78-f8rc-xrxh'

A denial of service vulnerability exists in React Server Components packages react-server-dom-webpack, react-server-dom-parcel, and react-server-dom-turbopack. The flaw can be triggered by specially crafted HTTP requests to server function endpoints, causing out-of-memory exceptions or excessive CPU usage. Versions 19.0.0 through 19.0.5, 19.1.0 through 19.1.6, and 19.2.0 through 19.2.5 are affected. Fixed versions 19.0.6, 19.1.7, and 19.2.6 have been released. Applications not using a server or React Server Components are not affected.