Parcel — Cyber Threats, Attacks & Incidents

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
December 4, 2025
Last Seen
December 4, 2025

Parcel is a web-focused technology platform (notably a zero-config JavaScript bundler) used to package and deploy applications.

Overview

Parcel is a web-focused technology platform (notably a zero-config JavaScript bundler) used to package and deploy applications. Its security relevance stems from its role in building apps that rely on frameworks like React and Next.js; vulnerabilities in those frameworks can propagate to Parcel-based workflows, making awareness of such risks important for developers and security teams.

Related Threat Clusters

  • Critical React Flaw CVE-2025-55182 Exposes Major Security Risks

    A maximum-severity vulnerability in the React JavaScript library, tracked as CVE-2025-55182, allows unauthenticated remote code execution on affected instances. Security researchers report that 39 percent of cloud…

    47 articles · Updated December 3, 2025

Recent Intelligence Reports

  • CVE-2025-55182 vulnerability in React and Next.js — Kaspersky · December 4, 2025

Related Entities

Zero-day Exploit CVE-2025-55182 CVE-2025-66478 Flight .js Next.js React React Router RSC React Server Components React-server-dom-parcel React-server-dom-turbopack React-server-dom-webpack

CVSS v3.1 Breakdown