---
id: 2470
title: "React & Next.js DoS Vulnerability (CVE-2025-55184): What You Need to Fix After React2Shell"
cve: CVE-2025-55184
cvss: 7.5
severity: high
source_domain: aikido.dev
source_url: "https://www.aikido.dev/blog/react-next-js-dos-vulnerability-cve-2025-55184"
published_at: "2025-12-12 00:00"
tags: ["appsec", "vulnerability-research", "denial-of-service", "deserialization", "react2shell", "nextjs", "react", "dos", "cve-2025-55184", "rsc"]
phying_url: "https://phying.com/item/2470"
lang: en
---

# React & Next.js DoS Vulnerability (CVE-2025-55184): What You Need to Fix After React2Shell

## Summary

CVE-2025-55184 is a DoS flaw in React Server Components tied to the same Flight deserialization layer as React2Shell; crafted requests hang servers, and teams must also patch follow-up CVE-2025-67779.

## Intelligence Metadata

- **Sources:** aikido.dev
- **CVE:** CVE-2025-55184
- **CVSS:** 7.5
- **Published:** 2025-12-12 00:00
- **Original:** https://www.aikido.dev/blog/react-next-js-dos-vulnerability-cve-2025-55184
- **Phying News:** https://phying.com/item/2470