Brand
React (Meta): actively exploited vulnerabilities
1 vulnerability in a React (Meta) product (React Server Components) is in CISA’s catalog of exploited vulnerabilities. It was added on December 5, 2025.
-
1 vulnerability added in the last 12 months
-
1 exploited vulnerability in the catalog, in total
-
0 added in the last 30 days
By category
Add just one React (Meta) category to your radar, or open its page.
- Frameworks and libraries 1 vulnerability
A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.
Affected products
- React Server Components1 vulnerability, Frameworks
Name used by CISA: Meta. Product families: indicative classification by this site.
Patch first
In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this React (Meta) list.
- Rank 1
React (Meta) React Server ComponentsCVE-2025-55182
Meta React Server Components Remote Code Execution Vulnerability
Ransomware
CVSS severity 10.0critical
Added Dec 5, 2025
Follow and verify
Indicative classification, based on the vendor and product names given by CISA. How products are classified.