feat: sec avoid vulnerable version of react #2452
Merged
+17
−12
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
🦋 Changeset detectedLatest commit: 0fb077a The changes in this PR will be included in the next version bump. This PR includes changesets to release 3 packages
Not sure what this means? Click here to learn what changesets are. Click here if you're a maintainer who wants to add another changeset to this PR |
CVE-2025-55182 affect react version 19.0.0 which could be used given current package.json Even though react usage is **very** small, it might still be better to avoid breached version in the future so let's request at least 19.2.1, latest 19 version with patch.
LoicDaval-Amadeus
force-pushed
the
patch-1
branch
from
330dcb3 to
7ee96c0
Compare
LoicDaval-Amadeus
changed the title
DmitryAnansky
changed the title
Contributor
|
@LoicDaval-Amadeus |
Contributor
|
Update: added changelog message. |
JLekawa
approved these changes
Dec 9, 2025
tatomyr
approved these changes
Dec 9, 2025
DmitryAnansky
approved these changes
Dec 9, 2025
6 tasks
Contributor
Author
|
Wow, this has been faster than expected hehe. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
4 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
What/Why/How?
CVE-2025-55182 affect react version 19.0.0 which could be used given current package.json
Even though react usage is very small, it might still be better to avoid breached version in the future so let's request at least 19.2.1, latest 19 version with patch.
Reference
Testing
Screenshots (optional)
Check yourself
Security