tag

Cyclic-Payload

Next.js RSC Server-Action DoS via Flight Deserialization (CVE-2026-23870)

CVE-2026-23870· Next.js App Router (React server-action / RSC reply parser) unpatched