Vite Plugin React has a Denial of Service Vulnerability in React Server Components

ALTO 7.5GHSA-cpqf-f22c-r95x · Published 12/12/2025 · updated 12/12/2025

In breve

GHSA-cpqf-f22c-r95x è una vulnerabilità ALTO (CVSS 7.5) che riguarda @vitejs/plugin-rsc.
Correzione: aggiornare a 0.5.7 o successiva.

Package	Affected versions	Patched versions
@vitejs/plugin-rsc npm	`< 0.5.7`	`0.5.7`

@vitejs/plugin-rsc vendors react-server-dom-webpack, which contained a vulnerability in versions prior to 19.2.3. See details in React repository's advisory https://github.com/facebook/react/security/advisories/GHSA-7gmr-mq3h-m5h9

Upgrade immediately to @vitejs/[email protected] or later.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

npm

< 0.5.7

0.5.7

Description

Upgrade immediately to @vitejs/[email protected] or later.

Altre vulnerabilità di @vitejs/plugin-rsc

Vedi tutto →