react-server-dom-turbopack
19.3.1 · 14 Oct 2026MIT20.3k / weekRepositoryHomepagenpmAtom feed
Security advisories
From OSV, open ones first. Each release line gets its own fix: an older major is fixed by a patch on that major, not by moving to the newest one.
Is your project affected?
Paste your package.json, or type the range you declare for react-server-dom-turbopack. It is read in your browser and sent nowhere.
| Line | Newest | Where it stands |
|---|---|---|
| 19.3.1 | Safe from 19.2.8 |
- CriticalReact Server Components are Vulnerable to RCEGHSA-fv66-9v8q-g76r · 3 Dec 2025
- 19.x19.0.0 – 19.2.0Fixed in 19.2.1
- Highreact-server-dom: Denial of Service in Server FunctionsGHSA-wx67-qw84-cm4g · 24 Jul 2026
- 19.x19.0.0 – 19.2.7Fixed in 19.2.8
- HighFacebook React has a Denial of Service Vulnerability in React Server ComponentsGHSA-rv78-f8rc-xrxh · 11 May 2026
- 19.x19.0.0 – 19.2.5Fixed in 19.2.6
- HighReact Server Components have a Denial of Service VulnerabilityGHSA-479c-33wc-g2pg · 10 Apr 2026
- 19.x19.0.0 – 19.2.4Fixed in 19.2.5
- HighReact Server Components have multiple Denial of Service VulnerabilitiesGHSA-83fc-fqcc-2hmg · 29 Jan 2026
- 19.x19.0.0 – 19.2.3Fixed in 19.2.4
- HighDenial of Service Vulnerability in React Server ComponentsGHSA-7gmr-mq3h-m5h9 · 12 Dec 2025
- 19.x19.0.2 – 19.2.2Fixed in 19.2.3
- HighDenial of Service Vulnerability in React Server ComponentsGHSA-2m3v-v2m8-q956 · 11 Dec 2025
- 19.x19.0.0 – 19.2.1Fixed in 19.2.2
- ModerateSource Code Exposure Vulnerability in React Server ComponentsGHSA-925w-6v3x-g4j4 · 11 Dec 2025
- 19.x19.0.0 – 19.2.1Fixed in 19.2.2
Registry facts last checked 21 Oct 2026. Releases and advisories last read 21 Oct 2026.