CVE-2025-67779
â ī¸ highSummary
It was found that the fix addressing CVE-2025-55184 in React Server Components was incomplete and does not prevent a denial of service attack in a specific case. React Server Components versions 19.0.2, 19.1.3 and 19.2.2 are affected, allowing unsafe deserialization of payloads from HTTP requests to Server Function endpoints. This can cause an infinite loop that hangs the server process and may prevent future HTTP requests from being served.
CVSS Score
7.5
High
EPSS Score
0.1
Exploit Probability
Published Date
2025-12-12
First Seen: 2026-01-05
đ Relative Risk Intelligence
This CVE is Moderate Risk - more severe than 69.0% of all 323,894 vulnerabilities in our database.
#100,292
Above average severity
Severity Percentile
đ¯ CISA SSVC Assessment Updated: Dec 12, 2025
đ Exploitation Status
None
No known exploits
âī¸ Automatable
YES
Can be exploited automatically
đĨ Technical Impact
Partial
Limited system impact
SSVC data provided by
CISA
Last Modified
2025-12-12
Source
NVD đ
CVSS Vector 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H