{"action":"Upgrade react-server-dom-parcel to 19.0.1 or later.","affected":[{"fixed":"19.0.1","introduced":"19.0.0"},{"fixed":"19.1.2","introduced":"19.1.0"},{"fixed":"19.2.1","introduced":"19.2.0"}],"component":"react-server-dom-parcel","cve_ids":["CVE-2025-55182"],"ecosystem":"npm","epss":0.99802,"exploited":true,"fixed_versions":["19.0.1","19.1.2","19.2.1"],"ghsa_id":"GHSA-fv66-9v8q-g76r","id":"tcs_01M5KFP989MEG799K95NKTGDBG","modified_at":"2025-12-09T17:46:07.154758Z","published_at":"2025-12-03T19:07:39Z","references":["https://osv.dev/vulnerability/GHSA-fv66-9v8q-g76r","https://github.com/facebook/react/security/advisories/GHSA-fv66-9v8q-g76r","https://nvd.nist.gov/vuln/detail/CVE-2025-55182","https://github.com/facebook/react/pull/35277","https://github.com/facebook/react/commit/7dc903cd29dac55efb4424853fd0442fef3a8700","https://github.com/ejpir/CVE-2025-55182-poc","https://github.com/facebook/react","https://github.com/facebook/react/releases/tag/v19.0.1","https://github.com/facebook/react/releases/tag/v19.1.2","https://github.com/facebook/react/releases/tag/v19.2.1","https://news.ycombinator.com/item?id=46136026","https://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components","https://www.facebook.com/security/advisories/cve-2025-55182","http://www.openwall.com/lists/oss-security/2025/12/03/4"],"severity":{"label":"critical","score":10},"sources":[{"source":"osv","source_id":"GHSA-fv66-9v8q-g76r#npm/react-server-dom-parcel","url":"https://osv.dev/vulnerability/GHSA-fv66-9v8q-g76r"},{"source":"kev","source_id":"CVE-2025-55182","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}],"summary":"React Server Components are Vulnerable to RCE"}