RE
Product
react-server-dom-turbopack
by Meta · last CVE Jul 21, 2026
On CISA KEVExploited in the wildRansomware-linked
8
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 1High 6Medium 1Low 0
Watch

Add react-server-dom-turbopack to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-55182
RansomwareIn wildKEV
10.0
100%
Dec 3
Meta React Server Components Remote Code Execution Vulnerability
Affected: 19.0.0 through 19.0.0; 19.1.0 through 19.1.1; 19.2.0 through 19.2.0
Showing 1