CVE-2025-55184

A high-severity Denial-of-Service (DoS) vulnerability (CVE-2025-55184) was disclosed in React Server Components and Next.js on December 11, 2025, allowing attackers to hang servers via a crafted HTTP …

A critical Remote Code Execution (RCE) vulnerability (CVE-2025-55182) was discovered in React Server Functions and Next.js, affecting all versions of React's Server Function protocol and implementatio…