Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/react-server-dom-parcel@19.1.6
purl pkg:npm/react-server-dom-parcel@19.1.6
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-fa57-smff-sbg2 A denial of service vulnerability exists in React Server Components, affecting the following packages: react-server-dom-parcel, react-server-dom-turbopack and react-server-dom-webpack (versions 19.0.0 through 19.0.4, 19.1.0 through 19.1.5, and 19.2.0 through 19.2.4). The vulnerability is triggered by sending specially crafted HTTP requests to Server Function endpoints.The payload of the HTTP request causes excessive CPU usage for up to a minute ending in a thrown error that is catchable. CVE-2026-23869
GHSA-479c-33wc-g2pg

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-13T07:05:09.961024+00:00 GHSA Importer Fixing VCID-fa57-smff-sbg2 https://github.com/advisories/GHSA-479c-33wc-g2pg 38.3.0
2026-04-11T12:45:21.051710+00:00 GithubOSV Importer Fixing VCID-fa57-smff-sbg2 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/04/GHSA-479c-33wc-g2pg/GHSA-479c-33wc-g2pg.json 38.3.0