Security advisories

high2026-05-11

@vitejs/plugin-rsc has a Denial of Service Vulnerability in React Server Components

GHSA-w94c-4vhp-22gx

high2026-04-10

@vitejs/plugin-rsc has a Denial of Service with React Server Components

GHSA-v457-wxvj-p9w9

high2025-12-16

@vitejs/plugin-rsc has an Arbitrary File Read via `/__vite_rsc_findSourceMapURL` Endpoint

GHSA-g239-q96q-x4qm · CVE-2025-68155

medium2025-12-12

Vite Plugin React has a Source Code Exposure Vulnerability in React Server Components

GHSA-c6m7-q6pr-c64r

high2025-12-12

Vite Plugin React has a Denial of Service Vulnerability in React Server Components

GHSA-cpqf-f22c-r95x

critical2025-12-08

@vitejs/plugin-rsc Remote Code Execution through unsafe dynamic imports in RSC server function APIs on development server

GHSA-j76j-5p5g-9wfr · CVE-2025-67489

critical2025-12-03

React Server Components are Vulnerable to RCE

GHSA-fmh4-wr37-44fp