npm/react-server-dom-parcel CVE-2026-44907: high 7.5, EPSS 0.60%
react-server-dom: Denial of Service in Server Functions
Action: Upgrade react-server-dom-parcel to 19.1.9 or later.
npm i react-server-dom-parcel@19.1.9npm i react-server-dom-parcel@19.2.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 19.1.0 | 19.1.9 | - |
| 19.2.0 | 19.2.8 | - |
Fixed versions
| 19.1.9 | 19.2.8 |
Sources
- osv: GHSA-wx67-qw84-cm4g#npm/react-server-dom-parcel
- https://github.com/react/react/security/advisories/GHSA-wx67-qw84-cm4g
- https://nvd.nist.gov/vuln/detail/CVE-2026-44907
- https://github.com/react/react
CVE-2026-44907 · published · modified · JSON