React Server Components security update: DoS and Source Code Exposure

Published: (December 11, 2025 at 08:00 AM EST)
1 min read

Source: Vercel Blog

Security Bulletin

Summary

Two additional vulnerabilities in React Server Components have been identified: a high‑severity Denial of Service (DoS) and a medium‑severity Source Code Exposure. These issues were discovered …

Impact

  • Denial of Service (DoS) – High severity
  • Source Code Exposure – Medium severity

Resolution

  • Details on the mitigation steps and patches are provided in the official Vercel release notes.

Fixed in

  • The vulnerabilities are addressed in the latest version of React Server Components.

Credit

  • The security research was conducted by Vercel’s internal security team.

References

Back to Blog

Related posts

Read more »