What is CVE-2025-55182?
CVE-2025-55182 is a vulnerability classified as Deserialization of Untrusted Data, affecting react-server-dom-webpack (affected versions: 19.0.0 – ≤ 19.0.0, 19.1.0 – ≤ 19.1.1, and other affected versions), react-server-dom-turbopack (affected versions: 19.0.0 – ≤ 19.0.0, 19.1.0 – ≤ 19.1.1, and other affected versions), and react-server-dom-parcel (affected versions: 19.0.0 – ≤ 19.0.0, 19.1.0 – ≤ 19.1.1, and other affected versions). This vulnerability is rated Critical, with a CVSS score of 10. This vulnerability has been observed being exploited in the wild.
