Still showing CVE-2025-66478/CVE-2025-55182 on Vercel dashboard

After the recent Critical Security Vulnerability, I have fixed it in my client’s project using React2Shell bulletin by vercel. The vercel dashboard is still showing the same Vulnerability.

As per the official doc, React2Shell bulletin by vercel, CVE-2025-66478 by nextjs and react.dev blog I have upgraded Next.js from 16.0.0 to 16.0.7

but, dashboard still showing Vulnerability(as shown below). Even npx fix-react2shell-next is returning No Vulnerability Found.

Not sure what I’m missing. Please help me fix this issue.

4 posts were merged into an existing topic: Security advisory for React2Shell

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.