tag

React-Flight

Next.js RSC Server-Action DoS via Flight Deserialization (CVE-2026-23870)

CVE-2026-23870· Next.js App Router (React server-action / RSC reply parser) unpatched