CVE-2025-55184 - Vulnerability Details

Related Threat Clusters

• Critical Vulnerabilities in React and Next.js Require Immediate Updates

  Multiple critical vulnerabilities affecting React Server Components and .js have been disclosed, including denial of service, server-side request forgery, and middleware bypass issues. These flaws impact versions 13.x…

  10 articles · Updated May 8, 2026
• Vulnerabilities Found in React Server Components Affecting Multiple Versions

  Two vulnerabilities have been identified in React Server Components versions 19.0.0 to 19.2.1. CVE-2025-55184 is a pre-authentication denial of service vulnerability, while CVE-2025-55183 is an information leak…

  2 articles · Updated December 12, 2025
• Two New Vulnerabilities Found in React Server Components Protocol

  Two vulnerabilities have been identified in the React Server Components (RSC) protocol during a security review of patches for React2Shell. These vulnerabilities do not allow for Remote Code Execution, and the existing…

  1 article · Updated December 11, 2025

Recent Intelligence Reports

• WAF and framework adapter mitigations for React and Next.js vulnerabilities · Changelog — Developers.Cloudflare · May 8, 2026
• CVE-2025-55184 Detail — Nvd.Nist · December 12, 2025
• Two new RSC protocol vulnerabilities uncovered — News.Ycombinator · December 11, 2025

Related Entities