{"action":"Upgrade @vitejs/plugin-rsc to 0.5.7 or later.","affected":[{"fixed":"0.5.7","introduced":"0"}],"component":"@vitejs/plugin-rsc","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["0.5.7"],"ghsa_id":"GHSA-cpqf-f22c-r95x","id":"tcs_01M5KFK8MPCEVCV1RF2PCJVKKH","modified_at":"2025-12-12T16:54:36.949639Z","published_at":"2025-12-12T16:41:08Z","references":["https://osv.dev/vulnerability/GHSA-cpqf-f22c-r95x","https://github.com/vitejs/vite-plugin-react/security/advisories/GHSA-cpqf-f22c-r95x","https://github.com/vitejs/vite-plugin-react"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-cpqf-f22c-r95x","url":"https://osv.dev/vulnerability/GHSA-cpqf-f22c-r95x"}],"summary":"Vite Plugin React has a Denial of Service Vulnerability in React Server Components"}