---
title: React Server Components CVE checker
description: Detects React Server Components and the React version, then checks OSV.dev for advisories.
---

# React Server Components CVE checker

Passively detects React Server Components and the React version, then checks that version against the OSV.dev advisory database for react-server-dom-* packages. No vulnerable-version list is maintained server-side. Only a confirmed advisory match (status confirmed_vulnerable) affects the grade; not_vulnerable and uncertain are informational and excluded from the weighted average.

## API

```
POST https://vibecheckscan.com/api/cve-2025-55182/check
Content-Type: application/json

{"url":"https://example.com"}
```

Returns `status` of `not_vulnerable`, `uncertain`, or `confirmed_vulnerable`, plus any
matching OSV advisories.

## Scoring

React Server Components detected plus an exact React version that OSV.dev reports advisories for (status confirmed_vulnerable) scores 0 and blocks an A. Status uncertain (version unresolved or OSV unreachable) and not_vulnerable do not affect the grade — check the affectsGrade flag.

## Notes

- The check is passive and uses GET requests only.
- No vulnerable-version list is maintained in this service. OSV.dev is the source of truth.