CVE-2025-55183

Source
https://cve.org/CVERecord?id=CVE-2025-55183
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-55183.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-55183
Aliases
Published
2025-12-11T20:16:00.460Z
Modified
2026-04-10T05:30:58.071753Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
[none]
Details

An information leak vulnerability exists in specific configurations of React Server Components versions 19.0.0, 19.0.1 19.1.0, 19.1.1, 19.1.2, 19.2.0 and 19.2.1, including the following packages: react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack. A specifically crafted HTTP request sent to a vulnerable Server Function may unsafely return the source code of any Server Function. Exploitation requires the existence of a Server Function which explicitly or implicitly exposes a stringified argument.

References

Affected packages

Git / github.com/facebook/react

Affected ranges

Type
GIT
Repo
https://github.com/facebook/react
Events
Introduced
Fixed
Introduced
Fixed
Introduced
Fixed
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Database specific
{
    "versions": [
        {
            "introduced": "19.0.0"
        },
        {
            "fixed": "19.0.2"
        },
        {
            "introduced": "19.1.0"
        },
        {
            "fixed": "19.1.3"
        },
        {
            "introduced": "19.2.0"
        },
        {
            "fixed": "19.2.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "16.1.0-NA"
        }
    ]
}
Type
GIT
Repo
https://github.com/vercel/next.js
Events
Introduced
Fixed
Introduced
Fixed
Introduced
Fixed
Introduced
Fixed
Introduced
Fixed
Introduced
Fixed
Introduced
Fixed
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Database specific
{
    "versions": [
        {
            "introduced": "15.0.0"
        },
        {
            "fixed": "15.0.7"
        },
        {
            "introduced": "15.1.0"
        },
        {
            "fixed": "15.1.11"
        },
        {
            "introduced": "15.2.0"
        },
        {
            "fixed": "15.2.8"
        },
        {
            "introduced": "15.3.0"
        },
        {
            "fixed": "15.3.8"
        },
        {
            "introduced": "15.4.0"
        },
        {
            "fixed": "15.4.10"
        },
        {
            "introduced": "15.5.0"
        },
        {
            "fixed": "15.5.9"
        },
        {
            "introduced": "16.0.0"
        },
        {
            "fixed": "16.0.10"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary10"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary11"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary12"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary13"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary14"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary15"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary16"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary17"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary18"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary19"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary20"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary21"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary22"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary23"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary24"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary25"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary26"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary27"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary28"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary29"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary30"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary31"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary32"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary33"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary34"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary35"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary36"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary37"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary38"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary39"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary40"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary41"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary42"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary43"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary44"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary45"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary46"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary47"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary48"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary49"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary50"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary51"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary52"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary53"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary54"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary55"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary56"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary57"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary58"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary59"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.6.0-canary9"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "16.1.0-canary0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "16.1.0-canary1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "16.1.0-canary10"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "16.1.0-canary11"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "16.1.0-canary12"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "16.1.0-canary13"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "16.1.0-canary14"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "16.1.0-canary15"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "16.1.0-canary16"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "16.1.0-canary17"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "16.1.0-canary18"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "16.1.0-canary2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "16.1.0-canary3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "16.1.0-canary4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "16.1.0-canary5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "16.1.0-canary6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "16.1.0-canary7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "16.1.0-canary8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "16.1.0-canary9"
        }
    ]
}

Affected versions

16.*
16.0.0-beta.1
16.0.0-beta.3
16.0.0-beta.4
16.0.0-beta.5
16.1.0
16.1.0-beta
16.1.0-beta.1
16.1.0-rc
v0.*
v0.10.0-rc1
v0.11.0-rc1
v0.12.0-rc1
v0.13.0-rc1
v0.13.0-rc2
v0.14.0-beta1
v0.14.0-beta2
v0.14.0-beta3
v0.14.0-rc1
v0.4.0
v0.9.0-rc1
v15.*
v15.0.0
v15.0.0-rc.1
v15.0.0-rc.2
v15.0.1
v15.0.1-canary.0
v15.0.1-canary.1
v15.0.1-canary.2
v15.0.1-canary.3
v15.0.2
v15.0.2-canary.0
v15.0.2-canary.1
v15.0.2-canary.10
v15.0.2-canary.11
v15.0.2-canary.2
v15.0.2-canary.3
v15.0.2-canary.4
v15.0.2-canary.5
v15.0.2-canary.6
v15.0.2-canary.7
v15.0.2-canary.8
v15.0.2-canary.9
v15.0.3
v15.0.3-canary.0
v15.0.3-canary.1
v15.0.3-canary.2
v15.0.3-canary.3
v15.0.3-canary.4
v15.0.3-canary.5
v15.0.3-canary.6
v15.0.3-canary.7
v15.0.3-canary.8
v15.0.3-canary.9
v15.0.4
v15.0.5
v15.0.6
v15.1.0
v15.1.1
v15.1.10
v15.1.2
v15.1.3
v15.1.4
v15.1.5
v15.1.6
v15.1.7
v15.1.8
v15.1.9
v15.2.0
v15.2.1
v15.2.1-canary.0
v15.2.1-canary.1
v15.2.1-canary.2
v15.2.1-canary.3
v15.2.1-canary.4
v15.2.1-canary.5
v15.2.1-canary.6
v15.2.2
v15.2.2-canary.0
v15.2.2-canary.1
v15.2.2-canary.2
v15.2.2-canary.3
v15.2.2-canary.4
v15.2.2-canary.5
v15.2.2-canary.6
v15.2.3
v15.2.4
v15.2.5
v15.2.6
v15.2.7
v15.3.0
v15.3.1
v15.3.2
v15.3.3
v15.3.4
v15.3.5
v15.3.6
v15.3.7
v15.4.0
v15.4.1
v15.4.2
v15.4.3
v15.4.4
v15.4.5
v15.4.6
v15.4.7
v15.4.8
v15.4.9
v15.5.0
v15.5.1
v15.5.1-canary.0
v15.5.1-canary.1
v15.5.1-canary.10
v15.5.1-canary.11
v15.5.1-canary.12
v15.5.1-canary.13
v15.5.1-canary.14
v15.5.1-canary.15
v15.5.1-canary.16
v15.5.1-canary.17
v15.5.1-canary.18
v15.5.1-canary.19
v15.5.1-canary.2
v15.5.1-canary.20
v15.5.1-canary.21
v15.5.1-canary.22
v15.5.1-canary.23
v15.5.1-canary.24
v15.5.1-canary.25
v15.5.1-canary.26
v15.5.1-canary.27
v15.5.1-canary.28
v15.5.1-canary.29
v15.5.1-canary.3
v15.5.1-canary.30
v15.5.1-canary.31
v15.5.1-canary.32
v15.5.1-canary.33
v15.5.1-canary.34
v15.5.1-canary.35
v15.5.1-canary.36
v15.5.1-canary.37
v15.5.1-canary.38
v15.5.1-canary.39
v15.5.1-canary.4
v15.5.1-canary.5
v15.5.1-canary.6
v15.5.1-canary.7
v15.5.1-canary.8
v15.5.1-canary.9
v15.5.2
v15.5.3
v15.5.4
v15.5.5
v15.5.6
v15.5.7
v15.5.8
v15.6.0
v15.6.0-canary.0
v15.6.0-canary.1
v15.6.0-canary.10
v15.6.0-canary.11
v15.6.0-canary.12
v15.6.0-canary.13
v15.6.0-canary.14
v15.6.0-canary.15
v15.6.0-canary.16
v15.6.0-canary.17
v15.6.0-canary.18
v15.6.0-canary.19
v15.6.0-canary.2
v15.6.0-canary.20
v15.6.0-canary.21
v15.6.0-canary.22
v15.6.0-canary.23
v15.6.0-canary.24
v15.6.0-canary.25
v15.6.0-canary.26
v15.6.0-canary.27
v15.6.0-canary.28
v15.6.0-canary.29
v15.6.0-canary.3
v15.6.0-canary.30
v15.6.0-canary.31
v15.6.0-canary.32
v15.6.0-canary.33
v15.6.0-canary.34
v15.6.0-canary.35
v15.6.0-canary.36
v15.6.0-canary.37
v15.6.0-canary.38
v15.6.0-canary.39
v15.6.0-canary.4
v15.6.0-canary.40
v15.6.0-canary.41
v15.6.0-canary.42
v15.6.0-canary.43
v15.6.0-canary.44
v15.6.0-canary.45
v15.6.0-canary.46
v15.6.0-canary.47
v15.6.0-canary.48
v15.6.0-canary.49
v15.6.0-canary.5
v15.6.0-canary.50
v15.6.0-canary.51
v15.6.0-canary.52
v15.6.0-canary.53
v15.6.0-canary.54
v15.6.0-canary.55
v15.6.0-canary.56
v15.6.0-canary.57
v15.6.0-canary.58
v15.6.0-canary.59
v15.6.0-canary.6
v15.6.0-canary.7
v15.6.0-canary.8
v15.6.0-canary.9
v16.*
v16.0.0
v16.0.0-alpha.3
v16.0.0-alpha.4
v16.0.0-rc.1
v16.0.1
v16.0.1-canary.0
v16.0.1-canary.1
v16.0.1-canary.2
v16.0.1-canary.3
v16.0.1-canary.4
v16.0.1-canary.5
v16.0.1-canary.6
v16.0.2
v16.0.2-canary.0
v16.0.2-canary.1
v16.0.2-canary.10
v16.0.2-canary.11
v16.0.2-canary.12
v16.0.2-canary.13
v16.0.2-canary.14
v16.0.2-canary.15
v16.0.2-canary.16
v16.0.2-canary.17
v16.0.2-canary.18
v16.0.2-canary.19
v16.0.2-canary.2
v16.0.2-canary.20
v16.0.2-canary.21
v16.0.2-canary.22
v16.0.2-canary.23
v16.0.2-canary.24
v16.0.2-canary.25
v16.0.2-canary.26
v16.0.2-canary.27
v16.0.2-canary.28
v16.0.2-canary.29
v16.0.2-canary.3
v16.0.2-canary.30
v16.0.2-canary.31
v16.0.2-canary.32
v16.0.2-canary.33
v16.0.2-canary.34
v16.0.2-canary.4
v16.0.2-canary.5
v16.0.2-canary.6
v16.0.2-canary.7
v16.0.2-canary.8
v16.0.2-canary.9
v16.0.3
v16.0.4
v16.0.5
v16.0.6
v16.0.7
v16.0.8
v16.0.9
v16.1.0
v16.1.0-canary.0
v16.1.0-canary.1
v16.1.0-canary.10
v16.1.0-canary.11
v16.1.0-canary.12
v16.1.0-canary.13
v16.1.0-canary.14
v16.1.0-canary.15
v16.1.0-canary.16
v16.1.0-canary.17
v16.1.0-canary.18
v16.1.0-canary.2
v16.1.0-canary.3
v16.1.0-canary.4
v16.1.0-canary.5
v16.1.0-canary.6
v16.1.0-canary.7
v16.1.0-canary.8
v16.1.0-canary.9
v19.*
v19.0.0
v19.0.1
v19.1.0
v19.1.1
v19.1.2
v19.2.0
v19.2.1

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-55183.json"