{"action":"Upgrade react-server-dom-turbopack to 19.0.3 or later.","affected":[{"fixed":"19.0.3","introduced":"19.0.2"},{"fixed":"19.1.4","introduced":"19.1.3"},{"fixed":"19.2.3","introduced":"19.2.2"}],"component":"react-server-dom-turbopack","cve_ids":["CVE-2025-67779"],"ecosystem":"npm","epss":0.19986,"exploited":false,"fixed_versions":["19.0.3","19.1.4","19.2.3"],"ghsa_id":"GHSA-7gmr-mq3h-m5h9","id":"tcs_01M5KFA0SE0BET6EBW25EB2MMY","modified_at":"2025-12-12T16:56:15.116931Z","published_at":"2025-12-12T16:32:43Z","references":["https://osv.dev/vulnerability/GHSA-7gmr-mq3h-m5h9","https://github.com/facebook/react/security/advisories/GHSA-2m3v-v2m8-q956","https://github.com/facebook/react/security/advisories/GHSA-7gmr-mq3h-m5h9","https://nvd.nist.gov/vuln/detail/CVE-2025-67779","https://github.com/facebook/react","https://react.dev/blog/2025/12/11/denial-of-service-and-source-code-exposure-in-react-server-components"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-7gmr-mq3h-m5h9#npm/react-server-dom-turbopack","url":"https://osv.dev/vulnerability/GHSA-7gmr-mq3h-m5h9"}],"summary":"Denial of Service Vulnerability in React Server Components"}