CVE-2026-23870 can let a crafted request overwhelm vulnerable Next.js servers using React Server Components.

Fixed React releases are 19.0.6, 19.1.7 and 19.2.6.

https://en.hacks.gr/provlima-sto-react-mporei-na-kanei-orismenes-efarmoges-na-stamatisoyn-na-apantoyn/

#React #NextJS #CVE202623870