Known CVE vulnerabilities and GitHub Security Advisories affecting the npm package rwsdk, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.
CVEs (2)
CVE-2026-39371 — CVSS 8.1 (high): RedwoodSDK is a server-first React framework. From 1.0.0-beta.50 to 1.0.5, erver functions exported from "use server" files could be…
CVE-2026-42190 — CVSS 5.3 (medium): RedwoodSDK is a server-first React framework. From version 1.0.0-beta.50 to before version 1.2.3, server actions in rwsdk apply HTTP method…