tocsin

CVE-2026-44907

3 advisories.

npm/react-server-dom-webpack CVE-2026-44907: high 7.5

react-server-dom: Denial of Service in Server Functions

Action: Upgrade react-server-dom-webpack to 19.0.8 or later.

npm i react-server-dom-webpack@19.0.8
npm i react-server-dom-webpack@19.1.9
npm i react-server-dom-webpack@19.2.8

Affected

introducedfixedlast affected
19.0.019.0.8-
19.1.019.1.9-
19.2.019.2.8-

Fixed versions

19.0.819.1.919.2.8

Sources

CVE-2026-44907 · published · modified · JSON

npm/react-server-dom-turbopack CVE-2026-44907: high 7.5

react-server-dom: Denial of Service in Server Functions

Action: Upgrade react-server-dom-turbopack to 19.0.8 or later.

npm i react-server-dom-turbopack@19.0.8
npm i react-server-dom-turbopack@19.1.9
npm i react-server-dom-turbopack@19.2.8

Affected

introducedfixedlast affected
19.0.019.0.8-
19.1.019.1.9-
19.2.019.2.8-

Fixed versions

19.0.819.1.919.2.8

Sources

CVE-2026-44907 · published · modified · JSON

npm/react-server-dom-parcel CVE-2026-44907: high 7.5

react-server-dom: Denial of Service in Server Functions

Action: Upgrade react-server-dom-parcel to 19.1.9 or later.

npm i react-server-dom-parcel@19.1.9
npm i react-server-dom-parcel@19.2.8

Affected

introducedfixedlast affected
19.1.019.1.9-
19.2.019.2.8-

Fixed versions

19.1.919.2.8

Sources

CVE-2026-44907 · published · modified · JSON