Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
It was found that the fix addressing CVE-2025-55184 in React Server Components was incomplete and does not prevent a denial of service attack in a specific case. React Server Components versions 19.0.2, 19.1.3 and 19.2.2 are affected, allowing unsafe deserialization of payloads from HTTP requests to Server Function endpoints. This can cause an infinite loop that hangs the server process and may prevent future HTTP requests from being served.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
5 versions affected across 2 products
You patched CVE-2025-55184. But the patch had a hole. CVE-2025-67779 — the incomplete fix that left developers who already updated still vulnerable to DoS. If you updated once and moved on, read this. https://www.datahogo.com/en/blog/cve-2025-67779-nextjs-dos-incomplete-patch
Post summary
The article warns that the recent patch for CVE‑2025‑67779 is incomplete, leaving systems vulnerable to a denial‑of‑service attack.
85 of 85 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | react | 19.0.2 | - | - | |
| App | react | 19.1.3 | - | - | |
| App | react | 19.2.2 | - | - | |
| App | vercel | next.js | - | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 15.6.0 | node.js | - |
| App | vercel | next.js | 16.1.0 | node.js | - |
| App | vercel | next.js | 16.1.0 | node.js | - |
| App | vercel | next.js | 16.1.0 | node.js | - |
| App | vercel | next.js | 16.1.0 | node.js | - |
| App | vercel | next.js | 16.1.0 | node.js | - |
| App | vercel | next.js | 16.1.0 | node.js | - |
| App | vercel | next.js | 16.1.0 | node.js | - |
| App | vercel | next.js | 16.1.0 | node.js | - |
| App | vercel | next.js | 16.1.0 | node.js | - |
| App | vercel | next.js | 16.1.0 | node.js | - |
| App | vercel | next.js | 16.1.0 | node.js | - |
| App | vercel | next.js | 16.1.0 | node.js | - |
| App | vercel | next.js | 16.1.0 | node.js | - |
| App | vercel | next.js | 16.1.0 | node.js | - |
| App | vercel | next.js | 16.1.0 | node.js | - |
| App | vercel | next.js | 16.1.0 | node.js | - |
| App | vercel | next.js | 16.1.0 | node.js | - |
| App | vercel | next.js | 16.1.0 | node.js | - |
| App | vercel | next.js | 16.1.0 | node.js | - |
| App | vercel | next.js | 16.1.0 | node.js | - |