Fix React Server Components CVE vulnerabilities#1
Conversation
Updated dependencies to fix Next.js and React CVE vulnerabilities. The fix-react2shell-next tool automatically updated the following packages to their secure versions: - next - react-server-dom-webpack - react-server-dom-parcel - react-server-dom-turbopack All package.json files have been scanned and vulnerable versions have been patched to the correct fixed versions based on the official React advisory. Co-authored-by: Vercel <vercel[bot]@users.noreply.github.com>
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
|
Hello from @codemakerai. CodeMaker AI GitHub App integration. Usage: @codemakerai [command or prompt] AssistantAll Assistant features are supported in GitHub. Assistant can answer general questions as well as questions directly @codemakerai assistant prompt - the assistant prompt CommandsPull Request Commands - commands that can be posted as comments on the pull request: @codemakerai help - prints this help message Pull Request Code Review Commands - commands that can be posted as comments on the code review i.e. "Files changed" tab: @codemakerai assistant prompt - the assistant prompt TriggersTo automatically trigger certain actions on pull requests you can create and use the following GitHub labels. codemakerai-pull-request-generate-documentation - automatically generates comments/documentation on Pull Request creation. For in depth explanation of the features, please consult https://docs.codemaker.ai In case of any issues please report them to https://community.codemaker.ai |
Important
This is an automatic PR generated by Vercel to help you patch known vulnerabilities related to CVE-2025-55182 (React2Shell), CVE-2025-55183, CVE-2025-55184, and CVE-2025-67779. We can't guarantee the PR is comprehensive, and it may contain mistakes.
Not all projects are affected by all issues, but patched versions are required to ensure full remediation.
Vercel has deployed WAF mitigations globally to help protect your application, but upgrading remains required for complete protection.
This automated pull request updates your React, Next.js, and related Server Components packages to versions that fix all currently known React Server Components vulnerabilities, including the two newly discovered issues.
See our Security Bulletins for more information and reach out to security@vercel.com with any questions.