
Vulnerabilities
React Server Components Flaw Allows Single-Request Denial of Service
A high-severity vulnerability in React 19 allows attackers to freeze Next.js servers using crafted HTTP POST requests without authentication.
Everything Threat Times has reported about React: 2 stories, newest first. Part of our Vulnerabilities coverage.

A high-severity vulnerability in React 19 allows attackers to freeze Next.js servers using crafted HTTP POST requests without authentication.

Security researchers report that a single HTTP POST request can cause Next.js servers to hang, posing a denial-of-service risk to web applications.