security_identifier

CVE-2025-67779

React Server Components hang-the-process bug tracked at CVSS 7.5: a crafted call to a Server Function endpoint loops without terminating, burning CPU until the process crashes or runs out of memory.

Current clusters

build1 publisher

React Compiler 1.0 skips any component that breaks the Rules of React

React Compiler 1.0 checks each component against the Rules of React and leaves the failures unoptimized, so lint debt is now a performance question. The December Server Function advisories only reach apps that run a server.

Publishers:dev.to

Reality

Evidence58
Adoption30
Hype gap+6
Incentives22
Confidence55