CVE-2025-67489
1 advisory.
npm/@vitejs/plugin-rsc CVE-2025-67489: critical 9.8
@vitejs/plugin-rsc Remote Code Execution through unsafe dynamic imports in RSC server function APIs on development server
Action: Upgrade @vitejs/plugin-rsc to 0.5.6 or later.
npm i @vitejs/plugin-rsc@0.5.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.5.6 | - |
Fixed versions
| 0.5.6 |
Sources
- osv: GHSA-j76j-5p5g-9wfr
- https://github.com/vitejs/vite-plugin-react/security/advisories/GHSA-j76j-5p5g-9wfr
- https://nvd.nist.gov/vuln/detail/CVE-2025-67489
- https://github.com/vitejs/vite-plugin-react/commit/fe634b58210d0a4a146a7faae56cd71af3bb9af4
- https://github.com/vitejs/vite-plugin-react
CVE-2025-67489 · published · modified · JSON