MEDIUM5.3npm
GHSA-c6m7-q6pr-c64rVite Plugin React has a Source Code Exposure Vulnerability in React Server Components
Modified: 12/12/2025
package
npm/@vitejs/plugin-rsc
pkg:npm/%40vitejs/plugin-rsc
HIGH7.5npm
GHSA-cpqf-f22c-r95xVite Plugin React has a Denial of Service Vulnerability in React Server Components
Modified: 12/12/2025
CRITICAL10.0npm
GHSA-fmh4-wr37-44fpReact Server Components are Vulnerable to RCE
Modified: 12/11/2025
HIGH7.5npm
GHSA-g239-q96q-x4qm· CVE-2025-68155@vitejs/plugin-rsc has an Arbitrary File Read via `/__vite_rsc_findSourceMapURL` Endpoint
Modified: 12/16/2025
CRITICAL9.8npm
GHSA-j76j-5p5g-9wfr· CVE-2025-67489@vitejs/plugin-rsc Remote Code Execution through unsafe dynamic imports in RSC server function APIs on development server
Modified: 12/9/2025
HIGH7.5npm
GHSA-v457-wxvj-p9w9@vitejs/plugin-rsc has a Denial of Service with React Server Components
Modified: 4/10/2026
HIGH7.5npm
GHSA-w94c-4vhp-22gx@vitejs/plugin-rsc has a Denial of Service Vulnerability in React Server Components
Modified: 5/11/2026