Inboxes List

Create an inbox to save and track emails. It's free!

+New inbox
Back
Back
Back 
<!DOCTYPE html>
<html xmlns="//www.w3.org/1999/xhtml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:v="urn:schemas-microsoft-com:vml">
 <head>
  <title>
   Security Update: Two additional React Server Components vulnerabilities
  </title>
  <!--[if !mso]><!-- -->
  <meta content="IE=edge" http-equiv="X-UA-Compatible"/>
  <!--<![endif]-->
  <meta content="text/html; charset=utf-8" http-equiv="Content-Type"/>
  <meta content="width=device-width,initial-scale=1" name="viewport"/>
  <style type="text/css">
   #outlook a { padding:0; }
          table { border-spacing:0;}
          img { border:0;height:auto;line-height:100%; outline:none;text-decoration:none;-ms-interpolation-mode:bicubic; }
          p { display:block; }
          :root { color-scheme: light dark; }
  </style>
  <!--[if mso]>         
          <xml>         
            <o:OfficeDocumentSettings xmlns:o="urn:schemas-microsoft-com:office:office">     
              <o:AllowPNG/>           
              <o:PixelsPerInch>96</o:PixelsPerInch>         
            </o:OfficeDocumentSettings>      
            <w:WordDocument xmlns:w="urn:schemas-microsoft-com:office:word">
              <w:DontUseAdvancedTypographyReadingMail/>
            </w:WordDocument>       
          </xml>             
          <style type="text/css">
            table { border-collapse:collapse;mso-table-lspace:0pt;mso-table-rspace:0pt; }
            .mj-outlook-group-fix { width:100% !important; }
          </style>         
        <![endif]-->
  <!--[if !mso]><!-->
  <link href="https://inboxflows.com/_/image/https%253A%252F%252Fclient-data.knak.io%252Fproduction%252Fcompany_data%252F672a519344809%252Fcustom-fonts%252F672b8bb24c152%252Ffonts.css/?inbox_flows_img_sig=eyJwYXRoIjoiaHR0cHMlM0ElMkYlMkZjbGllbnQtZGF0YSIsInRpbWUiOjE3NjU1MTUxMDIuMzkwOTUyNn0:1vTv82:xMPmPH29rbxjcSg5InaF_H4dmFBZH2RjlSZ4rNz1hW4" rel="stylesheet" type="text/css"/>
  <style type="text/css">
   @import url(https://inboxflows.com/_/image/https%253A%252F%252Fclient-data.knak.io%252Fproduction%252Fcompany_data%252F672a519344809%252Fcustom-fonts%252F672b8bb24c152%252Ffonts.css/?inbox_flows_img_sig=eyJwYXRoIjoiaHR0cHMlM0ElMkYlMkZjbGllbnQtZGF0YSIsInRpbWUiOjE3NjU1MTUxMDIuMzkwOTUyNn0:1vTv82:xMPmPH29rbxjcSg5InaF_H4dmFBZH2RjlSZ4rNz1hW4);
  </style>
  <!--<![endif]-->
  <style type="text/css">
   @media only screen and (min-width:480px) {
        .mj-column-per-100 { width:100% !important; max-width: 100%; }
      }
  </style>
  <style type="text/css">
   body, .body { margin:0;padding:0;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%; }
.links-0070F3 a { color: #0070F3; text-decoration: none; }
#body #main [x-apple-data-detectors-type] { 
          color: inherit !important; 
          -webkit-text-decoration-color: inherit !important; 
          text-decoration: inherit !important;
          font-weight: inherit !important;
         }
u ~ div ul, u ~ div ol {margin-left: -3px}
.mso-button-dark-mode a {background: transparent !important;}
.links-454545 a { color: #454545; text-decoration: none; }
        

        
        
            @media only screen and (min-width:480px) {        
                .padding-16px-24px-16px-24px { padding: 16px 24px 16px 24px !important}
            }
        
        
            @media screen and (prefers-color-scheme: dark) {        
                .dark-mode-background-color-000000:not([class^="x_"]) { background-color: #000000 !important}
.light-mode-image:not([class^="x_"]) { display: none !important } .dark-mode-image:not([class^="x_"]) { display: block !important }
.dark-mode-color-A0A0A0:not([class^="x_"]) { color: #A0A0A0 !important}
.dark-mode-background-color-FFFFFF:not([class^="x_"]) { background-color: rgba(255,255,255,0.99) !important}
.dark-mode-color-000000:not([class^="x_"]) { color: #000000 !important}
.dark-mode-color-8C8C8C:not([class^="x_"]) { color: #8C8C8C !important}
.dark-mode-link-color-8C8C8C:not([class^="x_"]) a { color: #8C8C8C !important}
            }
  </style>
  <style type="text/css">
   ul{display: block;}sup, sub{line-height:0;}body a{text-decoration: none; color: #0070F3;}.image-highlight{transition: 0.3s;}.image-highlight:hover{filter: brightness(1.2);}@media only screen and (min-width: 480px) { .hide-on-mobile{display:block !important;}.hide-on-desktop{display:none !important;} }.hide-on-desktop{display:block;}.hide-on-mobile{display:none;}
  </style>
  <!--[if mso]>
            <style>
                .hide-on-mobile {display:block !important}
            </style>
        <![endif]-->
  <!--[if mso]>
                <style>         
                    .ul-b8f7be50-d6f9-11f0-9b1c-a146cd7859db li { 
          margin-left: -47px !important; 
          text-indent: -17px; }
        .ul-b8f7be50-d6f9-11f0-9b1c-a146cd7859db li li { 
          margin-left: -47px !important;
          text-indent: -17px; 
         }
ul li { tab-stops: 100%; }
.ul-b8f99310-d6f9-11f0-9b1c-a146cd7859db li { 
          margin-left: -47px !important; 
          text-indent: -17px; }
        .ul-b8f99310-d6f9-11f0-9b1c-a146cd7859db li li { 
          margin-left: -47px !important;
          text-indent: -17px; 
         }
                </style>
            <![endif]-->
  <!--[if gte mso 16]>
                <style>
                    .mso-text-white a { mso-style-textfill-type: gradient; mso-style-textfill-fill-gradientfill-stoplist: "0 \#FFFFFF 0 100000\,100000 \#FFFFFF 0 100000"; color: #000000 !important; } 
                </style>
            <![endif]-->
  <style>
   [class~="x_body"] { width: 99.9% }
  </style>
 </head>
 <body class="body dark-mode-background-color-000000" id="body" style="word-spacing:normal;background-color:#FFFFFF;">
  <!--[if !mso 9]><!-->
  <div id="emailPreHeader" style="display: none;">
   Important security updates affecting React and Next.js applications
  </div>
  <div style="display: none;">
   ‍͏  ͏  ‍͏  ͏  ‍͏  ͏  ‍͏  ͏  ‍͏  ͏  ‍͏  ͏  ‍͏  ͏  ‍͏  ͏  ‍͏  ͏  ‍͏  ͏  ‍͏  ͏  ‍͏  ͏  ‍͏  ͏  ‍͏  ͏  ‍͏  ͏  ‍͏  ͏  ‍͏  ͏  ‍͏  ͏  ‍͏  ͏  ‍͏  ͏  ‍͏  ͏  ‍͏  ͏  ‍͏  ͏  ‍͏  ͏  ‍͏  ͏  ‍͏  ͏  ‍͏  ͏  ‍͏  ͏  ‍͏  ͏  ‍͏  ͏  ‍͏  ͏  ‍͏  ͏  ‍͏  ͏  ‍͏  ͏  ‍͏  ͏  ‍͏  ͏  ‍͏  ͏  ‍͏  ͏  ‍͏  ͏ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­ ͏‌ ­ ­ ­ ­
  </div>
  <!--<![endif]-->
  <img alt="" border="0" height="1" id="k_trk" src="https://inboxflows.com/_/image/https%253A%252F%252Ftracking.inflection.io%252F02522a2b2726fb0a03bb19f2d8d9524d%252FgAAAAABpO59cDynppeW4JGgV5cGe7tMFNlYN2p9R3XFbLBFv22l7ybLh6Tb4f5eVQ9QZZCfNi0DIY0tPBRWvIgfvNvvTV5uIukJKerSZq0Ol1nNogoLNJsZszLepqqle-BPdzqtLE2cUlL-NeMUXXK7zeHu_SeS6a8asDCDSJVVpqn2FggBi2ILYFJlR76g4_zAkHXQE_T3yRamD2lFZn7OskSpr2GzCLxW8J-E-TIomLpulOL9osiLJn1-YjkkLIX8txSgGMsqv9GiAgkhfzvpitTisbGqUvfQiH2rY2lxPIuWm6-cnSgSUvACsnCT5db12mwZkm4rFrC5P8gpt1YZwqkyobQG-Om6hZXbCPkdIuNjXUYWxDk6AnIDos6c-9yME0G2YAoRffxbKxAFujosWg3dktBGpb-qK0b-n4l8gSR7Ntx4WAljd0IkQ2bTXxiNVwb3LCaLgq2RLuut3LPlFP3ZVnVyGpTmaWsNxSylCwToD21-_oXa3Zn11opeaYFgdqoQ_lwpdidoFjyzWmSOjih0Ftz021WTHtkvQaAKUminkrjUMAR5GpLZ9TXPktL6qWDT-WoaTvrMID6581rLlR4Zkl9B2seHuv5fYoQe05VezwzqQZ5dA7OgCPJkT_kjCjYahGUH6YBbHD8qfufnbaT_Sfzr7DxQUus-0Oi83Zcwsqo34MKMEHW_Rg7xPrUt65RIJTgydw1xYElAVv8_YFLZ_ruEspm385Xpk38y8s81h8SpAObMekSgazV4sLIiT_2W1ZRF9ehtEJ5CoBtniMMB3Su2ACPzOne2KZWdPQab5kVo64CtsirYz22ODZheVb-em3YhC3AFrTA8IYT5mIgWTiI0tBc-vyCqMLonm0DPBx1zc6UZCczJyVA1yZS9is713b1GxZNv86TiRWCbM1DpmUg1RZ76PFBXQ30BBxGAFgxw7cIjBLnEyHLQ8083A4hs868rAtMnaVB4l9h9kqdZsAGTrByreELwx0vPdL2awowmkBsg%253D%252Fredirect%253Fredirect%253Dhttps%253A%252F%252Fproduction.k-trk.com%252Fktrack%252F%253Fk%253D693b6cccc5a1a/?inbox_flows_img_sig=eyJwYXRoIjoiaHR0cHMlM0ElMkYlMkZ0cmFja2luZy5pbiIsInRpbWUiOjE3NjU1MTUxMDIuNDAxNTY3fQ:1vTv82:rRVPbA4Wgb3EVGh-lRw9lktE15FtCiHvpKR7qJiNUfs" style="height:1px !important;
                width:1px !important;
                border-width:0 !important;
                margin-top:0 !important;
                margin-bottom:0 !important;
                margin-right:0 !important;
                margin-left:0 !important;
                padding-top:0 !important;
                padding-bottom:0 !important;
                padding-right:0 !important;
                padding-left:0 !important;
                display:block;" title="" width="1"/>
  <div class="dark-mode-background-color-000000" id="main" style="background-color:#FFFFFF;background-position:center center;background-size:auto;background-repeat:repeat;">
   <table align="center" border="0" cellpadding="0" cellspacing="0" class="section dark-mode-background-color-000000" role="presentation" style="background-color:#FFFFFF;width:100%;">
    <tr>
     <td align="center">
      <div role="none">
       <!--[if mso | IE]>
<table align="center" border="0" cellpadding="0" cellspacing="0" class="block-grid-outlook" style="width:600px;" width="600" >
<tr>
<td style="line-height:0px;font-size:0px;mso-line-height-rule:exactly;"><![endif]-->
       <div style="background:transparent;background-color:transparent;margin:0 auto;max-width:600px;">
        <table align="center" border="0" cellpadding="0" cellspacing="0" role="presentation" style="background-color:transparent;width:100%;">
         <tr>
          <td class="block-grid" style="font-size:0px;padding:0;text-align:center;vertical-align:top;">
           <!--[if mso | IE]>
<table role="presentation" border="0" cellpadding="0" cellspacing="0">
<tr>
<td style="vertical-align:top;width:600px;" ><![endif]-->
           <div class="mj-column-per-100 mj-outlook-group-fix" style="font-size:0px;text-align:left;direction:ltr;display:inline-block;vertical-align:top;width:100%;">
            <table border="0" cellpadding="0" cellspacing="0" role="presentation" style="border-radius:0px;vertical-align:top;" width="100%">
             <tr>
              <td class="img-container" style="font-size:0px;padding:48px 24px 8px 24px;word-break:break-word;text-align:center;">
               <div style="margin:0 auto;max-width:96px;">
                <a style="text-decoration: none; color: #0070F3;" target="_blank">
                 <img alt="" class="light-mode-image" height="auto" src="https://inboxflows.com/_/image/https%253A%252F%252Ftracking.inflection.io%252F02522a2b2726fb0a03bb19f2d8d9524d%252FgAAAAABpO59ct2GOS3hsV7l0HqzZlfi4rOLFx8J9VU083TMuSjy6xv5CZamarsaxruzmFGsIofGW5yS2z6Rm7SZyjsVEMFtDoGZiZlpD9Mc8EheH4b4ItPaaWVhW4D9rYDuSp3IzuqI01RxC83hDo7-EkwwnfSmFkRlDC-W53gBZKY062UxHFw4f4VqXcRnYCxskMS2FwFfkNVE5v22nDKaV9AtQMQWQfBis71jMC6s_JA8ls8pWnfOW9E_FXDz0FisEca9kiYXZMkG23gJws58nhP5fDzukG6LRpE59UNwU5vN95KCs-Aak-_Go5EJ-RGNIAjS5W157w_CIFzS9NNGQxetpWXm3OaEf12KSaQHFcvyxT6k7ACadF80QGkerblr6w85jEH4E6wvGiprH4GEZza7c1SDcWmPPVVCH8YAHFyC5xK5Sveg8Z8eoEQCmgC8siz6VFsXGtegg3Joz2xSwFR0W_smdEdnbt-8FpAkMHf9WgjTyrUWhPksh1XqwhxfTT3QtyZ5jii2Ayrt3NiGr56AKdBt2NOwac6lZOgMijuU2yq5RAcgReMWJrQ_B-xZRWDC6-J4iY_8UcBoQPV0M54sEYufRBD5olRSaB-JybAN2zYlEZmr_zyJrmTu0I7C-mq-exg0tf79BU3qG4FaimzDHD8LXllPy-MBC1iaEjBLzFz5MzvSNGPKtiDgJAd_y_SlDiMRJ3D6pYLWpMtux7up4YjHcWUz3z-6Wa4lNybiK8Upt7ZSvVQ41lHXEcONdRX4so_mP1w2nWD6NXi0dnYeH4KSG0Ecc1J9mAz9DM_kjOmPF50n7X6I76UaEK2OfKJPU7SaKd2lOmUjOrX1Jtrvo7I1I21nucQd6hSeAH7bpEtvq0aeTgviuv9kr7EkTcfwqRLVSoiD4gYfcohzwAh7bBEX3aEjwQG6lLR_ilxEtFCNZHMmmIjfr8YoCgdS5mofNBkZGmmyCFlHO8mTd2KMowTnQezN1TUx_Kq2-m4hHSm6G8kBMbeRkFcK71jk-ADn5CvJjSgDvf0lLwXMOkpAfhgybWA%253D%253D%252Fredirect%253Fredirect%253Dhttps%253A%252F%252Fres.cloudinary.com%252Fzeit-inc%252Fimage%252Fupload%252Ff_auto%252Cq_auto%252Fv1%252Femail%252Fvercel-circle/?inbox_flows_img_sig=eyJwYXRoIjoiaHR0cHMlM0ElMkYlMkZ0cmFja2luZy5pbiIsInRpbWUiOjE3NjU1MTUxMDIuNDAyMDM3MX0:1vTv82:2qZjtV8sicEKU0FhcbJiQYXR4Vy7bhwYy0ACGTVHl8E" style="border:none;border-radius:0px;outline:none;text-decoration:none;height:auto;width:100%;font-size:13px;display:block;" width="96"/>
                 <!--[if !mso]><!-->
                 <img alt="" class="dark-mode-image" height="auto" src="https://inboxflows.com/_/image/https%253A%252F%252Ftracking.inflection.io%252F02522a2b2726fb0a03bb19f2d8d9524d%252FgAAAAABpO59cdo8VO2tfSkTMVjiZH2q28l_0MPDmZeXOE1u4uh-O2JbEvSjnMmHrFz32ztMTgNDryNkph1dhaYD9nkYuUwoOKW3ji2b9gmD1SOJvYLg6sVc3i2tvqV567JEFYQw1UALf0fZEixQKfhWgBNCip0LMAgboBboMz7SDZoQy9xKoe_tBKW4pTqASJaIK7pG2EKL18B1yK79QlEhS33c0pkis60uXB3CS9DADbxBmpoSFj1ELCqp2jiUE16DDgpUsC3DYIGKO_ZCitPqtRwc3cCyxnedKE3DDE_fjqwwsohMd1nnk4CdBpTFov90YzFBAGAPx1JLvjkqpzqHEor7hQBgHqGU9uT1ApXSAib7TxhggZCxoR6fkUtk7o6h3bCvjEYPO5FkaYR4HEVciEcSiyBziT2w30_SEmS0ZE20DDHX57Qye0PKedxlAQljUdASof193hSV0-VFXg5lmpOKREOYXn99Wk7kAPo9hjZy8eARLgcvacno59OzzMQ4RdM4z5XM7AteykN6_iiAo1EoHAm0yMusOtBCKtxth98-d04gt9ywsT3NGPdhWR92yOUOMb8lfBuQJLRGbJZ343JgU-h3la2HdTKyvewfQ6Rmb9rf7NVT_z24SkbwcSJKFVLOUA3OtrOYh1ED-3eI2MuFo7fDK0JXD-9CdYGwUsvc5umIhe9otB1LtLH2ZB1yvYWK3UP7rKj51XuCqgPKDWh58UIh2DehEX37JInYICTSZ1GvlbiySBhv4fCL-js2imX34q1P_jcoHRiAdYehD_hiWiHr8eomvJjZHkN__95nRYGbkjS1NR_c_XGX04GfCfMJsW6D0XIW0-FOaUvNXpThFqWq4B8J0L2HdsKh2ljm2NNRZRg73hpDIAY-QoSECEDM_uGukpV7Moi-4lFwPz_HmPl42EBZaK8dSq851zO74GEPKbpMurY6s8kjlUJu3XuVq12wHprkrZySF3NsAaI2AnROSD6e3CgyWq-9MONu9j0MVNkemlYuwGGLDU_QBODg7nuH0F3MyXj08ihbGJ28ON6IuPA%253D%253D%252Fredirect%253Fredirect%253Dhttps%253A%252F%252Fres.cloudinary.com%252Fzeit-inc%252Fimage%252Fupload%252Ff_auto%252Cq_auto%252Fv1%252Femail%252Fvercel-circle-dark/?inbox_flows_img_sig=eyJwYXRoIjoiaHR0cHMlM0ElMkYlMkZ0cmFja2luZy5pbiIsInRpbWUiOjE3NjU1MTUxMDIuNDAyNDIwNX0:1vTv82:E-PZWJ0M2Ssh3YMf_mB03rY_Vr35_TD3JIpDuHZ0Tgg" style="border:none;border-radius:0px;outline:none;text-decoration:none;height:auto;width:100%;font-size:13px;display:none;" width="96"/>
                 <!--<![endif]-->
                </a>
               </div>
              </td>
             </tr>
             <tr>
              <td class="text-container" style="font-size:0px;padding:8px 24px 8px 24px;word-break:break-word;text-align:left;">
               <div class="links-0070F3">
                <div class="dark-mode-color-A0A0A0" style="font-family:'Geist', Arial, sans-serif;font-size:16px;font-weight:400;letter-spacing:none;line-height:1.50;text-align:left;mso-line-height-alt:1.5em;color:#666666;">
                 <p style="margin: 0 0 0px 0;">
                  We're informing you about two additional vulnerabilities (CVE-2025-55184 and CVE-2025-55183) identified in the React Server Components (RSC) implementation, affecting frameworks such as Next.js.
                 </p>
                </div>
               </div>
              </td>
             </tr>
             <tr>
              <td class="text-container" style="font-size:0px;padding:8px 24px 8px 24px;word-break:break-word;text-align:left;">
               <div class="links-0070F3">
                <div class="dark-mode-color-A0A0A0" style="font-family:'Geist', Arial, sans-serif;font-size:16px;font-weight:400;letter-spacing:none;line-height:1.50;text-align:left;mso-line-height-alt:1.5em;color:#666666;">
                 <p style="margin: 0 0 0px 0;">
                  The React2Shell incident sparked community research into React Server Components, and these vulnerabilities were discovered by an external security researcher through Vercel and Meta's bug bounty program. We're grateful for this community effort.
                 </p>
                </div>
               </div>
              </td>
             </tr>
             <tr>
              <td class="text-container" style="font-size:0px;padding:8px 24px 8px 24px;word-break:break-word;text-align:left;">
               <div class="links-0070F3">
                <div class="dark-mode-color-A0A0A0" style="font-family:'Geist', Arial, sans-serif;font-size:16px;font-weight:400;letter-spacing:none;line-height:1.50;text-align:left;mso-line-height-alt:1.5em;color:#666666;">
                 <p style="margin: 0 0 0px 0;">
                  There is no evidence these vulnerabilities have been exploited.
                 </p>
                </div>
               </div>
              </td>
             </tr>
             <tr>
              <td class="text-container" style="font-size:0px;padding:8px 24px 8px 24px;word-break:break-word;text-align:left;">
               <div class="links-0070F3">
                <div class="dark-mode-color-A0A0A0" style="font-family:'Geist', Arial, sans-serif;font-size:16px;font-weight:400;letter-spacing:none;line-height:1.50;text-align:left;mso-line-height-alt:1.5em;color:#666666;">
                 <p style="margin: 0 0 0px 0;">
                  What we've found:
                 </p>
                 <ul class="ul-b8f7be50-d6f9-11f0-9b1c-a146cd7859db" style="display: block; margin-top: 0px; margin-bottom: 0px; padding-left: 48px; list-style-type: disc; mso-para-margin-left: 48px;">
                  <li style="padding-left: 0px; margin-left: 0px; margin-top: 13px; margin-bottom: 8px;">
                   <strong>
                    CVE-2025-55184 (High Severity – Denial of Service):
                   </strong>
                   A malicious HTTP request sent to any App Router endpoint can, when deserialized, cause the server process to hang and consume CPU. This impacts all versions handling RSC requests. The initial fix was incomplete and did not fully prevent denial-of-service attacks for all payload types, resulting in CVE-2025-67779.
                  </li>
                  <li style="padding-left: 0px; margin-left: 0px; margin-bottom: 13px;">
                   <strong>
                    CVE-2025-55183 (Medium Severity – Source Code Exposure):
                   </strong>
                   A malicious HTTP request sent to any App Router endpoint can return the compiled source code of Server Actions. This could reveal business logic, but would not expose secrets unless they were hardcoded directly into a Server Action's code.
                  </li>
                 </ul>
                </div>
               </div>
              </td>
             </tr>
             <tr>
              <td class="button-container" style="font-size:0px;padding:24px 12px 24px 12px;word-break:break-word;text-align:center;" valign="middle">
               <div>
                <!--[if mso]>
<table width="100%" align="center" border="0" cellpadding="0" cellspacing="0" style="border-spacing:0;border-collapse:collapse;mso-table-lspace:0pt;mso-table-rspace:0pt;">
<tr>
<td align="center" class="mso-button-dark-mode"><a:roundrect xmlns:a="urn:schemas-microsoft-com:vml" xmlns:w="urn:schemas-microsoft-com:office:word" href="https://vercel.com/kb/bulletin/security-bulletin-cve-2025-55184-and-cve-2025-55183" fillcolor="#000000" arcsize="157%" style="v-text-anchor:middle;width:123pt;height:38.25pt;" stroke="f" ><w:anchorlock/><a:textbox inset="0,0,0,0"><center style="color:#ffffff; font-family:sans-serif, Arial; font-size:16px" class="mso-text-white"><![endif]-->
                <a class="dark-mode-background-color-FFFFFF dark-mode-color-000000" style="display: inline-block; width: auto; background: #000000; color: #ffffff; font-family: 'Geist', Arial, sans-serif; font-size: 16px; font-weight: 500; line-height: 1.2; margin: 0; text-align: center; text-decoration: none; text-transform: none; padding: 16px 20px 16px 20px; mso-padding-alt: 0px; border-radius: 80px; mso-border-alt: none; box-sizing: border-box;" target="_blank" width="164">
                 Security Bulletin
                </a>
                <!--[if mso]></center></a:textbox></a:roundrect>
</td>
</tr>
</table><![endif]-->
               </div>
              </td>
             </tr>
             <tr>
              <td class="text-container" style="font-size:0px;padding:8px 24px 8px 24px;word-break:break-word;text-align:left;">
               <div class="links-0070F3">
                <div class="dark-mode-color-A0A0A0" style="font-family:'Geist', Arial, sans-serif;font-size:16px;font-weight:400;letter-spacing:none;line-height:1.50;text-align:left;mso-line-height-alt:1.5em;color:#666666;">
                 <p style="margin: 0 0 0px 0;">
                  What you should do:
                 </p>
                 <ul class="ul-b8f99310-d6f9-11f0-9b1c-a146cd7859db" style="display: block; margin-top: 0px; margin-bottom: 0px; padding-left: 48px; list-style-type: disc; mso-para-margin-left: 48px;">
                  <li style="padding-left: 0px; margin-left: 0px; margin-top: 13px; margin-bottom: 8px;">
                   <p style="margin: 0 0 0px 0;">
                    Update your applications to the latest patched version
                   </p>
                  </li>
                  <li style="padding-left: 0px; margin-left: 0px; margin-bottom: 13px;">
                   <p style="margin: 0 0 0px 0;">
                    Even customers who have patched against React2Shell need to upgrade to the latest version. Updates to React2Shell will continue to be posted in the
                    <a rel="noopener" style="color: rgb(0, 112, 243); text-decoration: none;" target="_blank">
                     React2Shell Security Bulletin
                    </a>
                    .
                   </p>
                  </li>
                 </ul>
                </div>
               </div>
              </td>
             </tr>
             <tr>
              <td class="text-container" style="font-size:0px;padding:8px 24px 8px 24px;word-break:break-word;text-align:left;">
               <div class="links-0070F3">
                <div class="dark-mode-color-A0A0A0" style="font-family:'Geist', Arial, sans-serif;font-size:16px;font-weight:400;letter-spacing:none;line-height:1.50;text-align:left;mso-line-height-alt:1.5em;color:#666666;">
                 <p style="margin: 0 0 0px 0;">
                  Visit the latest
                  <a rel="noopener" style="color: rgb(0, 112, 243); text-decoration: none;" target="_blank">
                   Security Bulletin
                  </a>
                  to learn more and for guidance on automated fixes.
                 </p>
                </div>
               </div>
              </td>
             </tr>
             <tr>
              <td class="text-container" style="font-size:0px;padding:8px 24px 8px 24px;word-break:break-word;text-align:left;">
               <div class="links-0070F3">
                <div class="dark-mode-color-A0A0A0" style="font-family:'Geist', Arial, sans-serif;font-size:16px;font-weight:400;letter-spacing:none;line-height:1.50;text-align:left;mso-line-height-alt:1.5em;color:#666666;">
                 <p style="margin: 0 0 0px 0;">
                  We will continue to monitor for emerging risks and remain committed to transparent, timely disclosures.
                 </p>
                </div>
               </div>
              </td>
             </tr>
             <tr>
              <td class="text-container" style="font-size:0px;padding:8px 24px 8px 24px;word-break:break-word;text-align:left;">
               <div class="links-0070F3">
                <div class="dark-mode-color-A0A0A0" style="font-family:'Geist', Arial, sans-serif;font-size:16px;font-weight:400;letter-spacing:none;line-height:1.50;text-align:left;mso-line-height-alt:1.5em;color:#666666;">
                 <p style="margin: 0 0 0px 0;">
                  - The Vercel Security Team
                 </p>
                </div>
               </div>
              </td>
             </tr>
             <tr>
              <td style="font-size:0px;padding:16px 24px 16px 24px;word-break:break-word;text-align:center;">
               <table border="0" cellpadding="0" cellspacing="0" role="none" style="border-top:solid 1px #80808033;font-size:0;display:inline-block;text-align:center;line-height:0;" width="100%">
                <tr>
                 <td height="0" style="height:0;line-height:0;">
                 </td>
                </tr>
               </table>
              </td>
             </tr>
             <tr>
              <td class="social-container" style="font-size:0px;padding:4px 24px 4px 24px;word-break:break-word;text-align:center;">
               <!--[if mso | IE]>
<table align="center" border="0" cellpadding="0" cellspacing="0" role="presentation" >
<tr>
<td><![endif]-->
               <div style="display:inline-block;">
                <table align="center" border="0" cellpadding="0" cellspacing="0" role="presentation" style="float:none;display:inline-table;">
                 <tr>
                  <td style="padding:8px;">
                   <table border="0" cellpadding="0" cellspacing="0" role="presentation" style="border-radius:0px;width:24px;">
                    <tr>
                     <td style="padding:0px;font-size:0;height:24px;vertical-align:middle;width:24px;">
                      <a style="text-decoration: none; color: #0070F3;" target="_blank">
                       <img alt="X" height="24" src="https://inboxflows.com/_/image/https%253A%252F%252Ftracking.inflection.io%252F02522a2b2726fb0a03bb19f2d8d9524d%252FgAAAAABpO59cRwu95VDZfuP6ubDnz2mOnHFRvKmOphBZttwaqYLedMFdJp_hUHpekeLwYVndxG_eyvG1filOfSKbV22kug2jH5-l4M6rx7ZEB7HKz7vqwDHtBuO-KddC6BegUf7IFn4Npuc-ClHiTsevN0j8hKBr7q901YEHG87qDFw8SFL5nwrkHWeXVA_rDwYNcKGroU0QbKokhWnwFOGBnm2ZHv8jgfjUUtwMmuyuWsAJbYetxYnX-sOMThsh9b06LIDks80ybH25tNkPVrRc_rFfamMMAWDLWlfbr6Kbvunuy7TcGMlQ4P7tauiTodl8r_y2Xq_93OO2CZs6T5fRPcsybwEmoHHkfa-YgmxMD1bUkGgqBHwwCqn0QWtQSdESmrDezoXPiIPmS4j-NIXK6_E4YMl0sQMnB3BfwJNxJK2Y-UZptwqargpspH5OSXkSrDZ8VfWnubq1py6Mmzaz02dFqTuw1_ZJznuc4s8dVfkgmRODSdbo_wfBJxojjNkvi0kkhOJht--tfmMq_y03uZWz8Ex1uFSCK-nVCQP23aGv1zebFFxYwfgHygu2JRVrqRC5zxLu8ddMeIUT0sZ5pNgXx1QO70meo9PAjMXxZyXecx5oFN1rSWkS_M1BOqwCrmQbUUgt8bBXpVSDQ51g4FGOBcyWA8L3sOImM8NjgccaFJPjaIfPUmMstxzkYy9nqDhpJ-ZyN7L0yE9hOjEGpgoP4P41HCMKv_HanG8w4slEkYN92WpY4fr7wiqYrLpulHi2ORMTa9k2NicEmlWiGa88mvCK3d2ZXySzV3vxj-KNdrpqUJzqOGsL_bOmHgndXEjp6tsTeAJbXKeytg5iOABBMJbM52TZce2788TbCdjw19HdwSH4kp_sGtyKRQaW2Hn6K-8k-H3Kt4gWQNqbKsvmGgQafUBTAMzabRry5TpXLTe1ajif-0jvnWlA-8Ot481CN124xSmTURA1TI-FqOaHAL23kaRiYJwJPlx5vgp2rQjzwDndmkxrCRccSFxmQB1-Nvln%252Fredirect%253Fredirect%253Dhttps%253A%252F%252Fassets.vercel.com%252Fimage%252Fupload%252Fv1732879213%252Femail%252Flogo-x.png/?inbox_flows_img_sig=eyJwYXRoIjoiaHR0cHMlM0ElMkYlMkZ0cmFja2luZy5pbiIsInRpbWUiOjE3NjU1MTUxMDIuNDAyNzczOX0:1vTv82:PIrlo2CVwxHHZILmXJ4r9HiZfPR7V-de0elJ7Q9JkD8" style="border-radius:0px;display:block;" width="24"/>
                      </a>
                     </td>
                    </tr>
                   </table>
                  </td>
                 </tr>
                </table>
               </div>
               <!--[if mso | IE]>
</td>
</tr>
</table><![endif]-->
              </td>
             </tr>
             <tr>
              <td class="text-container" style="font-size:0px;padding:10px 10px 15px 10px;word-break:break-word;text-align:center;">
               <div class="links-454545">
                <div class="dark-mode-color-8C8C8C dark-mode-link-color-8C8C8C" style="font-family:'Geist', Arial, sans-serif;font-size:12px;font-weight:400;letter-spacing:0.1px;line-height:1.4;text-align:center;mso-line-height-alt:1.063em;color:#454545;">
                 <p style="margin: 0 0 0px 0;">
                  <a rel="noopener" style="color: rgb(69, 69, 69); text-decoration: none;" target="_blank">
                   Talk to a Vercel expert
                  </a>
                  →
                  <br/>
                  <a rel="noopener" style="color: rgb(69, 69, 69); text-decoration: none;" target="_blank">
                   Docs
                  </a>
                  |
                  <a rel="noopener" style="color: rgb(69, 69, 69); text-decoration: none;" target="_blank">
                   Blog
                  </a>
                  |
                  <a rel="noopener" style="color: rgb(69, 69, 69); text-decoration: none;" target="_blank">
                   Contact
                  </a>
                  |
                  <a rel="noopener" style="color: rgb(69, 69, 69); text-decoration: none;" target="_blank">
                   Community
                  </a>
                  |
                  <a rel="noopener" style="color: rgb(69, 69, 69); text-decoration: none;" target="_blank">
                   Careers
                  </a>
                  <br/>
                  440 N Barranca Ave #4133 Covina, CA 91723
                  <br/>
                  Copyright © 2025 Vercel Inc. All rights reserved.
                  <br/>
                  View our
                  <a rel="noopener" style="color: rgb(69, 69, 69); text-decoration: none;" target="_blank">
                   Privacy Policy
                  </a>
                  or
                  <a rel="noopener" style="color: rgb(69, 69, 69); text-decoration: none;" target="_blank">
                   unsubscribe
                  </a>
                  .
                 </p>
                </div>
               </div>
              </td>
             </tr>
            </table>
           </div>
           <!--[if mso | IE]>
</td>
</tr>
</table><![endif]-->
          </td>
         </tr>
        </table>
       </div>
       <!--[if mso | IE]>
</td>
</tr>
</table><![endif]-->
      </div>
     </td>
    </tr>
   </table>
  </div>
  <img height="0px" src="https://inboxflows.com/_/image/https%253A%252F%252Ftracking.inflection.io%252F02522a2b2726fb0a03bb19f2d8d9524d%252FgAAAAABpO59cHu53eymkFMDO0F9NEhF0-4e5FKobSXllpxIU79fqMEoULt7rzR6OjvDcusH5n4Yn9xq8GTfVZVnCwVoIBKz3C75g8tP5TeRcLGoKYeu6dadtr5zGL0TKQV_gFGNy-ptVCtW14M-ardZqY1OPWuRozX5KoNQYuhuU0Pwe1wckNDgSsDB4Vte667AzB_wNu4DqudySYT6g5-xBNEcHr8sa7LyMFJTNXxWKzVDFuJYczu9QqsDxJ5oujtsVmesjErVP0u6YVQ-wReGOhghldKu9oIWdiQI3QbN1vQcuzP15ZV13hQZidBqJJ6MiWAJ0v7DAdxkAhpd25oG2Byp6qAIqm9Vrfh1baqUjkJ5JOWkAJJ1Nk-x2svYkFh6cOmdPbDioQ_brSMYU85zArrmCNUx5tXs8aMSPt0OzX2FlhmbAGmN_XGGLMoYIu4HnoIiL_t8QzikfdEPiUg_Hs_wdggyfEOt6fnHvy7EwrY6yUR2la4DKqLvaHsZ7TcFyGmfX3noY-p-vm6DDueEq95CggUOLPUKE_zODkneKh0SmPjSHAfyVMq59Ks1AdUp-mB9Mno45R9L2r0e1O5C4sKJRgXUA5nPXvWBBsh1f-0Co7xU4dAr4XE8t8yUSGOT1tZ0GCaO1RiR9fivNPkRJFKpwmP52hw2w-1QEuEdL3QKD7P2ONvUJfRvpNygK6CokdG6WDOhQl1t5YED01444MqjEiaSFikn6VOHlR1W3unXwHb7Oz6-ieS9bpyrcOB4HowaJZDSUQTMAMa2AjKFIGRoPn8d4bG7uiszM0vW2sRj6VoW4FBnaURB0g1m72Up6nEmIMuZRjeaMO4NyJSxrkjyaXSMHSM--CoqS6_GhPuVUjz1Bspwm0EDL05yX-PFky467fyAvwB7OU6fC5hMMFzqvZxTBpHQat8654vjnnpyXd3O-oKymMZXyt1KqSVDuS1WJvKiJm4tHa78nFOZWECPTBaqG_A%253D%253D%252Fredirect%253Fredirect%253Dhttps%253A%252F%252Ftracking.inflection.io%252Fbeacon/?inbox_flows_img_sig=eyJwYXRoIjoiaHR0cHMlM0ElMkYlMkZ0cmFja2luZy5pbiIsInRpbWUiOjE3NjU1MTUxMDIuNDAzMDA0fQ:1vTv82:LStYWpWjMvpzdhyr2Ew7zVvxPJ0f4yghc-2h5i9chyA" width="0px"/>
 </body>
</html>