#3

Fix React Server Components RCE vulnerability

Draftvercel[bot]wants to merge intofrom

A critical remote code execution (RCE) vulnerability in React Server Components, impacting frameworks such as Next.js, was identified in the project ai-sdk-image-generator. The vulnerability enables unauthenticated RCE on the server via insecure deserialization in the React Flight protocol.

This issue is tracked under:

This automated pull request upgrades the affected React and Next.js packages to patched versions that remediate the issue.

More Info

Activity

2
vercel[bot]11mo ago

The latest updates on your projects. Learn more about Vercel for GitHub.

ProjectDeploymentPreviewCommentsUpdated (UTC)
ai-sdk-image-generator ReadyPreviewCommentDec 6, 2025 6:19am

This pull request is a draft

Merging is unavailable until it is marked ready for review.