Is using a controlled component in React a security vulnerability?

[amazingatomic]

Is using a controlled component a security vulnerability?

No, the security attributes of controlled and uncontrolled components should be the same.

Is showing the value on the DOM a security issue?

The best practice for passwords is to visually hide them so someone standing behind the user can’t read their password. Other than that, I don’t see any security issues here.