{"action":"Upgrade @vitejs/plugin-rsc to 0.5.3 or later.","affected":[{"fixed":"0.5.3","introduced":"0"}],"component":"@vitejs/plugin-rsc","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["0.5.3"],"ghsa_id":"GHSA-fmh4-wr37-44fp","id":"tcs_01M5KFNT3JBE14M6FPW6JFD1CD","modified_at":"2025-12-11T18:28:39.190722Z","published_at":"2025-12-03T19:07:52Z","references":["https://osv.dev/vulnerability/GHSA-fmh4-wr37-44fp","https://github.com/facebook/react/security/advisories/GHSA-fv66-9v8q-g76r","https://github.com/vercel/next.js/security/advisories/GHSA-9qr9-h5gf-34mp","https://github.com/vitejs/vite-plugin-react/security/advisories/GHSA-fmh4-wr37-44fp","https://github.com/vitejs/vite-plugin-react","https://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components"],"severity":{"label":"critical","score":10},"sources":[{"source":"osv","source_id":"GHSA-fmh4-wr37-44fp","url":"https://osv.dev/vulnerability/GHSA-fmh4-wr37-44fp"}],"summary":"React Server Components are Vulnerable to RCE"}