highCVSS 7.5Vulnerability
GHSA-v457-wxvj-p9w9
### Impact `@vitejs/plugin-rsc` vendors `react-server-dom-webpack`, which contained a vulnerability in versions prior to 19.2.4. See details in React repository's advisory https://github.com/facebook/react/security/advisories/GHSA-479c-33wc-g2pg ### Patches Upgrade immediately to `@vitejs/[email protected]` or later.
Properties
- ghsa_id
- GHSA-v457-wxvj-p9w9
- summary
- @vitejs/plugin-rsc has a Denial of Service with React Server Components
- severity
- high
- cvss_score
- 7.5
- cve_id
- GHSA-v457-wxvj-p9w9
- cvss_vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- is_ghsa_only
- true
- ghsa_published
- 2026-04-10T15:36:00Z
- source_url
- https://github.com/advisories/GHSA-v457-wxvj-p9w9
- ghsa_updated
- 2026-04-10T15:36:04Z
Related Entities (4)
VULNERABLE_TO (1)
←[Software]npm/@vitejs/plugin-rsc
REPORTED_BY (1)
→[Source]GitHub Advisory Database
AFFECTS (1)
→[Software]npm/@vitejs/plugin-rsc
HAS_WEAKNESS (1)
→[Weakness]Uncontrolled Resource Consumption
Explore deeper with Ninja Signal's threat intelligence graph