#3
Fix React Server Components RCE vulnerability
A critical remote code execution (RCE) vulnerability in React Server Components, impacting frameworks such as Next.js, was identified in the project ai-sdk-image-generator. The vulnerability enables unauthenticated RCE on the server via insecure deserialization in the React Flight protocol.
This issue is tracked under:
- GitHub Security Advisory: GHSA-9qr9-h5gf-34mp
- React Advisory: CVE-2025-55182
- Next.js Advisory: CVE-2025-66478
This automated pull request upgrades the affected React and Next.js packages to patched versions that remediate the issue.
Activity
2This pull request is a draft
Merging is unavailable until it is marked ready for review.
The latest updates on your projects. Learn more about Vercel for GitHub.