npm / react-is
react-is
What changed in react-is 19, from its official release notes, upgrade guides and advisories. Also covers @types/react-is, react-server-dom-webpack, react-test-renderer. Sources checked 2026-10-19.
9 security1 performance1 behavior and defaults3 fixes and other
See which of these apply to your code, ranked, in your agent:
npx @unstale/cli initreact-is 1914 changes
Security 9
Facebook React has a Denial of Service Vulnerability in React Server Components
React Server Components have a Denial of Service Vulnerability
React Server Components have multiple Denial of Service Vulnerabilities
Denial of Service Vulnerability in React Server Components
Denial of Service Vulnerability in React Server Components
Source Code Exposure Vulnerability in React Server Components
React Server Components are Vulnerable to RCE
Adds DoS mitigations to Server Actions and hardens Server Components.
Hardened Server Components.
Performance 1
Type hardening and performance improvements were made to React Server Components.
Behavior and default changes 1
React Server Functions have extra loop protection.
Fixes and other changes 3
Fixed missing FormData entries in Server Actions, a regression introduced in 19.2.6.
React Server Component fixes are brought to Server Actions.
Adds more cycle protections in React Server Components.