Nutrition label

curl "https://radicalnotion.ai/api/v1/cves/CVE-2025-55182/nutrition" \
  -H "Authorization: Bearer $RN_TOKEN"

{
  "cveId": "CVE-2025-55182",
  "state": "PUBLISHED",
  "isKEV": true,
  "published": "2025-12-03T15:40:56Z",
  "updated": "2025-12-11T20:15:37Z",
  "assignedBy": "Meta",
  "description": "A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including the following packages: react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack. The vulnerable code unsafely deserializes payloads from HTTP requests to Server Function endpoints.",
  "hasExploits": true,
  "hasPublicExploitCode": true,
  "epssData": {
    "date": "2026-07-22",
    "epss_score": 0.99562,
    "percentile": 0.99942
  },
  "metrics": [
    {
      "source": "CNA",
      "provider": "Meta",
      "baseScore": 10,
      "cvssVersion": "CVSS:3.1",
      "baseSeverity": "CRITICAL",
      "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"
    }
  ],
  "cweDetails": {},
  "ssvcAssessment": [
    {
      "id": "CVE-2025-55182",
      "role": "CISA Coordinator",
      "options": [
        {
          "Exploitation": "active"
        },
        {
          "Automatable": "yes"
        },
        {
          "Technical Impact": "total"
        }
      ],
      "version": "2.0.3",
      "timestamp": "2025-12-03T00:00:00+00:00"
    }
  ],
  "affectedProductsJson": [
    {
      "source": "cna",
      "vendor": "Meta",
      "product": "react-server-dom-parcel",
      "versions": [
        {
          "status": "affected",
          "version": "19.0.0",
          "versionType": "semver",
          "lessThanOrEqual": "19.0.0"
        },
        {
          "status": "affected",
          "version": "19.1.0",
          "versionType": "semver",
          "lessThanOrEqual": "19.1.1"
        },
        {
          "status": "affected",
          "version": "19.2.0",
          "versionType": "semver",
          "lessThanOrEqual": "19.2.0"
        }
      ],
      "updatedAt": "2026-03-04T19:59:49.823237+00:00",
      "defaultStatus": "unaffected",
      "first_patched_version": "> 19.0.0"
    }
  ],
  "references": [
    "https://aws.amazon.com/blogs/security/china-nexus-cyber-threat-groups-rapidly-exploit-react2shell-vulnerability-cve-2025-55182/",
    "https://news.ycombinator.com/item?id=46136026"
  ],
  "publicExploits": [
    {
      "id": "29de5f16-2c4f-54ee-a31c-bf3c1bf0f1b4",
      "source": "exploitdb",
      "authors": [
        "danieljavanrad"
      ],
      "platform": [
        "multiple"
      ],
      "verified": false,
      "createdAt": "2026-04-10T03:01:50Z",
      "sourceUrl": "https://www.exploit-db.com/exploits/52506",
      "updatedAt": "2026-07-09T03:00:29Z",
      "moduleName": "React Server 19.2.0 - Remote Code Execution",
      "modulePath": "52506",
      "references": [
        {
          "refType": "CVE",
          "refValue": "CVE-2025-55182",
          "refNormalized": "CVE-2025-55182"
        }
      ],
      "sourceCode": "# Exploit Title:  React Server 19.2.0 - Remote Code Executio…",
      "description": "React Server 19.2.0 - Remote Code Execution",
      "exploitType": "webapps",
      "disclosureDate": "2026-04-09"
    }
  ],
  "versionHistory": [
    {
      "id": "8cea09aa-4b78-48b4-8ed3-4ff269574515",
      "title": "Weakness classification added, and 2 more changes",
      "messages": [
        {
          "id": "3be962a6-3f15-4823-a8ab-65c678c9f83f",
          "json_path": "containers/nvd",
          "operation": "group_header",
          "change_type": "NVD_GROUP",
          "display_order": 0,
          "provider_name": "NVD",
          "container_type": "nvd",
          "change_category": "nvd",
          "change_priority": 5,
          "summary_message": "NVD assessed the CVE"
        },
        {
          "id": "610849a1-f70e-4b54-8f58-4f152b5cf48a",
          "json_path": "containers/nvd/x_cwe/0/cweId",
          "new_value": "CWE-502",
          "operation": "add",
          "change_type": "CWE_MODIFIED",
          "display_order": 1,
          "provider_name": "NVD",
          "container_type": "nvd",
          "change_category": "nvd",
          "change_priority": 5,
          "summary_message": "Weakness: CWE-502",
          "new_value_formatted": "CWE-502"
        }
      ],
      "timestamp": "2026-06-17T09:41:24Z",
      "version_to": 10,
      "added_count": 3,
      "ingested_at": "2025-12-11T20:30:03Z",
      "version_from": 10,
      "removed_count": 0,
      "modified_count": 0,
      "title_category": "nvd",
      "is_latest_version": true,
      "cve_metadata_date_updated": "2025-12-11T20:15:37Z"
    }
  ],
  "analysisData": [
    {
      "created_at": "2025-12-15T15:29:11.228223+00:00",
      "updated_at": "2025-12-15T15:29:11.228226+00:00",
      "analysis_data": {
        "rn_analysis": {
          "identified_vendor": "Meta",
          "analysis_timestamp": "2025-12-11T20:15:37.699Z",
          "identified_products": [
            "react-server-dom-webpack",
            "react-server-dom-turbopack",
            "react-server-dom-parcel"
          ]
        }
      },
      "analysis_type": "vendor",
      "source_data_hash": "94d559726f8fde2941ca0a59981a0c82a47b0abb47ba1bb3094157e92bc904f0"
    },
    {
      "created_at": "2025-12-03T20:35:42.233958+00:00",
      "updated_at": "2026-04-28T02:42:24.984840+00:00",
      "analysis_data": {
        "cvss_v4_0_assessment": {
          "metadata": {
            "base_score": 10,
            "base_severity": "Critical",
            "rescore_timestamp": "2025-12-12T12:00:00Z",
            "generated_vector_string": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/U:Red"
          }
        }
      },
      "analysis_type": "metrics",
      "source_data_hash": "f1433d43dc08c8e5ec4f14f26e792c5a57cc76ccc1cab7ce90bf0cf88042646f"
    }
  ]
}