Meta Schwachstellen (CVE)

Für Meta veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

9 Ergebnisse
7.5Hoch
CVE-2026-44907
Meta react-server-dom-turbopack; Meta react-server-dom-parcel; Meta react-server-dom-webpack

A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to excessive CPU usage; affecting the following packages: react-server-dom-webpack, react-server-dom-parcel, react-se…

7.5Hoch
CVE-2026-23870
Meta react-server-dom-turbopack; Meta react-server-dom-parcel; Meta react-server-dom-webpack

A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to server crashes, out-of-memory exceptions or excessive CPU usage; affecting the following packages: react-server-do…

1.5%EPSS
7.5Hoch
CVE-2026-23869
Meta react-server-dom-turbopack; Meta react-server-dom-parcel; Meta react-server-dom-webpack; Red Hat Red Hat OpenShift AI (RHOAI)

A denial of service vulnerability exists in React Server Components, affecting the following packages: react-server-dom-parcel, react-server-dom-turbopack and react-server-dom-webpack (versions 19.0.0 through 19.0.4, 19.1.0 through 19.1.5, and 19.2.0 through …

1.6%EPSS
7.5Hoch
CVE-2026-23864
Meta react-server-dom-webpack; Meta react-server-dom-turbopack; Meta react-server-dom-parcel; Red Hat Streams for Apache Kafka 2.9.4

Multiple denial of service vulnerabilities exist in React Server Components, affecting the following packages: react-server-dom-parcel, react-server-dom-turbopack, react-server-dom-webpack. The vulnerabilities are triggered by sending specially crafted HTTP …

2.6%EPSS
7.5Hoch
CVE-2025-67779
Meta react-server-dom-parcel; Meta react-server-dom-turbopack; Meta react-server-dom-webpack

It was found that the fix addressing CVE-2025-55184 in React Server Components was incomplete and does not prevent a denial of service attack in a specific case. React Server Components versions 19.0.2, 19.1.3 and 19.2.2 are affected, allowing unsafe deserial…

20%EPSS
7.5Hoch
CVE-2025-55184
Meta react-server-dom-webpack; Meta react-server-dom-turbopack; Meta react-server-dom-parcel

A pre-authentication denial of service vulnerability exists in React Server Components versions 19.0.0, 19.0.1 19.1.0, 19.1.1, 19.1.2, 19.2.0 and 19.2.1, including the following packages: react-server-dom-parcel, react-server-dom-turbopack, and react-server-d…

67%EPSS
5.3Mittel
CVE-2025-55183
Meta react-server-dom-webpack; Meta react-server-dom-turbopack; Meta react-server-dom-parcel

An information leak vulnerability exists in specific configurations of React Server Components versions 19.0.0, 19.0.1 19.1.0, 19.1.1, 19.1.2, 19.2.0 and 19.2.1, including the following packages: react-server-dom-parcel, react-server-dom-turbopack, and react-…

64%EPSS
10.0Kritisch
CVE-2025-55182 KEV In Ransomware genutzt

Meta React Server Components Remote Code Execution Vulnerability

Meta react-server-dom-webpack; Meta react-server-dom-turbopack; Meta react-server-dom-parcel

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including the following packages: react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack. The vul…

100%EPSS
3.5Niedrig
CVE-2025-30259
Meta WhatsApp cloud service

The WhatsApp cloud service before late 2024 did not block certain crafted PDF content that can defeat a sandbox protection mechanism and consequently allow remote access to messaging applications by third parties, as exploited in the wild in 2024 for installa…