🛡️ RSC Security Auditor

Detect critical security vulnerabilities (CVE-2025-66478, CVE-2025-55184) in your Next.js & React Server Components stack.

🚨 Urgent: Recent disclosures (Dec 2025) have revealed critical DoS and RCE vulnerabilities in React Server Components. This tool helps you audit your package.json instantly.

⚡ Features

• 🔒 Privacy First: 100% Client-side. Your package.json data never leaves your browser.
• 🧠 Smart Analysis: Detects specific vulnerable version ranges for next, react, and react-dom.
• 🩹 Auto-Remediation: Generates ready-to-use upgrade commands (npm, pnpm, yarn, bun) to fix issues.
• ✨ Modern UI: Built with Next.js 15, Tailwind CSS, and Vercel's Geist font.
• 📡 Live Vulnerability DB: Architecture allows for easy updates as new CVEs are discovered.

🎯 Detected Vulnerabilities

This tool currently checks for the following disclosures:

🚀 Getting Started

To run this project locally:

1. Clone the repository

   root@kitploit:~

   git clone https://github.com/abdozkaya/rsc-security-auditor.git
   cd rsc-security-auditor
   

2. Install dependencies

   root@kitploit:~

   npm install
   # or
   pnpm install
   

3. Run the development server

   root@kitploit:~

   npm run dev
   

4. Open http://localhost:3000 with your browser.

🛠️ Tech Stack

• Framework: Next.js 15 (App Router)
• Styling: Tailwind CSS
• Icons: Lucide React
• Font: Geist Sans & Mono

🤝 Contributing

Contributions are welcome! If you find a new vulnerability related to RSC, please update lib/vulnerability-db.ts and open a Pull Request.

1. Fork the Project
2. Create your Feature Branch (git checkout -b feature/NewCVE)
3. Commit your Changes (git commit -m 'Add CVE-202X-XXXX')
4. Push to the Branch (git push origin feature/NewCVE)
5. Open a Pull Request

👤 Author

Abdullah Özkaya

• X: @ozkayabd
• GitHub: @abdozkaya

📄 License

This project is licensed under the MIT License - see the LICENSE file for details.