After the recent Critical Security Vulnerability, I have fixed it in my client’s project using React2Shell bulletin by vercel . The vercel dashboard is still showing the same Vulnerability. As per the official doc, React2Shell bulletin by vercel , CVE-2025-66478 by nextjs and react.dev blog I have up…

Hi @techchintan , are all the projects in this list have been fixed manually by you? Are there any open PR’s on them? The warning is about “preview” deployments, which ideally your customers won’t access. To fix this message, ensure you have Vercel Authentication enabled in your project settings: …

Still showing CVE-2025-66478/CVE-2025-55182 on Vercel dashboard

Help

pawlean (Pauline P. Narvas) Split this topic December 9, 2025, 6:50pm 2

4 posts were merged into an existing topic: Security advisory for React2Shell

Topic		Replies	Views
Security advisory for React2Shell Announcements nextjs , handbook , security	21	2387	January 27, 2026
React Server Components security update: DoS and Source Code Exposure Announcements changelog	2	186	January 19, 2026
Should I manually update React/React-DOM after running npx fix-react2shell-next? Help nextjs , react	2	130	December 12, 2025
vercel upgrade issue Help	3	46	December 30, 2025
Misleading warning about react2shell CVE (suggested wrong Next.js version to patch to) v0 nextjs	3	165	December 16, 2025

Still showing CVE-2025-66478/CVE-2025-55182 on Vercel dashboard

Related topics