9 Total advisories
9 Vulnerabilities
0 Malware
Dependency scanning
Check whether react-server-dom-parcel is in your codebase
Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.
Vulnerabilities
UNKNOWN
CVE-2026-126187
React: Unauthenticated Remote Code Execution in React Server Components
HIGH 7.5
CVE-2026-44907
react-server-dom: Denial of Service in Server Functions
HIGH 7.5
CVE-2026-23870
Facebook React has a Denial of Service Vulnerability in React Server Components
HIGH 7.5
CVE-2026-23869
React Server Components have a Denial of Service Vulnerability
HIGH 7.5
CVE-2026-23864
React Server Components have multiple Denial of Service Vulnerabilities
HIGH 7.5
CVE-2025-67779
Denial of Service Vulnerability in React Server Components
HIGH 7.5
CVE-2025-55184
Denial of Service Vulnerability in React Server Components
MEDIUM 5.3
CVE-2025-55183
Source Code Exposure Vulnerability in React Server Components
CRITICAL 10.0
CVE-2025-55182
React Server Components are Vulnerable to RCE
Browse more npm advisories
Learn What is SAST?
Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →
Ready to move
Start Securing
Free, no credit card | First findings in minutes