Skip to content

Next.js is vulnerable to RCE in React flight protocol

Critical severity GitHub Reviewed Published Dec 3, 2025 in vercel/next.js • Updated Dec 11, 2025

No open alerts for this advisory

Give feedback on Dependabot alerts