security_identifier

CVE-2025-55183

Identifier for a source-code exposure vulnerability in React Server Components, in which a request can return the code of a project's Server Functions, scored CVSS 5.3.

Current clusters

build1 publisher

React Compiler 1.0 skips any component that breaks the Rules of React

React Compiler 1.0 checks each component against the Rules of React and leaves the failures unoptimized, so lint debt is now a performance question. The December Server Function advisories only reach apps that run a server.

Publishers:dev.to

Reality

Evidence58
Adoption30
Hype gap+6
Incentives22
Confidence55