react-server-dom-webpack

React Server Components bindings for DOM using Webpack. This is intended to be integrated into meta-frameworks. It is not intended to be imported directly.

Latest 19.3.0

NPM

86%

Total Score

Maintainer Stability

100

Dependencies

100

Maturity

Supply Chain

Attestations

100

Are you affected? Scan for Free

Health Score Breakdown

Dangerous workflows

Four workflows use pull_request_target and two use workflow_run, so privileged automation deserves review; however, no untrusted checkout or script-injection patterns were detected across the 26 analyzed workflows.

Repo package mention

The linked repository name does not match the package name and its README does not mention react-server-dom-webpack, creating ambiguity about whether the repository directly backs this package; organization ownership and the package's React-specific artifact structure reduce but do not eliminate that concern.

Version stability

Version 19.3.0 is a stable major and is not marked prerelease, but 95% of recent versions are prereleases, consistent with an experimental package and warranting some compatibility caution.

Vulnerabilities

Title	Versions	Severity
CVE-2026-44907 react-server-dom-webpack is vulnerable to Uncontrolled Resource Consumption in versions 19.0.0 - 19.0.8, 19.1.0 - 19.1.9 and 19.2.0 - 19.2.8.	19.0.0 - 19.0.819.1.0 - 19.1.919.2.0 - 19.2.8	High
AIKIDO-2026-10093 react-server-dom-webpack is vulnerable to Denial of Service (DoS) in versions 19.0.0 - 19.0.3, 19.1.0 - 19.1.4 and 19.2.0 - 19.2.3.	19.0.0 - 19.0.319.1.0 - 19.1.419.2.0 - 19.2.3	High
AIKIDO-2025-10866 react-server-dom-webpack is vulnerable to Remote Code Execution (RCE) in versions 19.0.0 - 19.0.2, 19.1.0 - 19.1.3 and 19.2.0 - 19.2.2.	19.0.0 - 19.0.219.1.0 - 19.1.319.2.0 - 19.2.2	Critical