react-server-dom-turbopack vulnerabilities
CVEs whose affected-version data names the react-server-dom-turbopack package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-44907High· 7.5react-server-dom: Denial of Service in Server Functions
react-server-dom: Denial of Service in Server Functions
▾ Twilightreact-server-dom-webpack · react-server-dom-webpackEPSS 0.60%via GHSA
CVE-2026-23870High· 7.5PoCA denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to server crashes, out-of-memory exceptions or excessive CPU usage; affecting the following pac…
A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to server crashes, out-of-memory exceptions or excessive CPU usage; affecting the following pac…
▾ Midnightfacebook · react-server-dom-parcelEPSS 1.5%via NVD