From c11c7c21a2b4408c73b3726babdf166f685ac2ea Mon Sep 17 00:00:00 2001 From: Vojtech Novak Date: Fri, 5 Dec 2025 17:42:57 +0100 Subject: [PATCH 1/3] Update RSC security vulnerability guidance for Expo Clarified actions needed for Expo users. --- ...cal-security-vulnerability-in-react-server-components.md | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/src/content/blog/2025/12/03/critical-security-vulnerability-in-react-server-components.md b/src/content/blog/2025/12/03/critical-security-vulnerability-in-react-server-components.md index aff8248ca8d..134b5702264 100644 --- a/src/content/blog/2025/12/03/critical-security-vulnerability-in-react-server-components.md +++ b/src/content/blog/2025/12/03/critical-security-vulnerability-in-react-server-components.md @@ -94,11 +94,9 @@ npm install @vitejs/plugin-rsc@latest ### Expo {/*expo*/} -Upgrade to the latest `react-server-dom-webpack`: +You only need to take action if you're using experimental RSC or Server Functions support in production. API routes are not affected. The impact on EAS Hosting was already mitigated through a WAF rule. -```bash -npm install react@latest react-dom@latest react-server-dom-webpack@latest -``` +To learn more about mitigating, read the article on [expo.dev/changelog](https://expo.dev/changelog/mitigating-critical-security-vulnerability-in-react-server-components). ### Redwood SDK {/*update-redwood-sdk*/} From b3b4009d4494085230a76931eaaf447b91fb66f4 Mon Sep 17 00:00:00 2001 From: Vojtech Novak Date: Fri, 5 Dec 2025 18:05:53 +0100 Subject: [PATCH 2/3] Update critical-security-vulnerability-in-react-server-components.md --- ...ritical-security-vulnerability-in-react-server-components.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/content/blog/2025/12/03/critical-security-vulnerability-in-react-server-components.md b/src/content/blog/2025/12/03/critical-security-vulnerability-in-react-server-components.md index 134b5702264..5feb717c847 100644 --- a/src/content/blog/2025/12/03/critical-security-vulnerability-in-react-server-components.md +++ b/src/content/blog/2025/12/03/critical-security-vulnerability-in-react-server-components.md @@ -94,7 +94,7 @@ npm install @vitejs/plugin-rsc@latest ### Expo {/*expo*/} -You only need to take action if you're using experimental RSC or Server Functions support in production. API routes are not affected. The impact on EAS Hosting was already mitigated through a WAF rule. +You only need to take action if you're using experimental RSC or Server Functions. To learn more about mitigating, read the article on [expo.dev/changelog](https://expo.dev/changelog/mitigating-critical-security-vulnerability-in-react-server-components). From 6fddf6c3ec980812e3323108664c4fa6c0ff39d0 Mon Sep 17 00:00:00 2001 From: Vojtech Novak Date: Fri, 5 Dec 2025 18:09:33 +0100 Subject: [PATCH 3/3] Update RSC security vulnerability guidance for Expo --- ...ritical-security-vulnerability-in-react-server-components.md | 2 -- 1 file changed, 2 deletions(-) diff --git a/src/content/blog/2025/12/03/critical-security-vulnerability-in-react-server-components.md b/src/content/blog/2025/12/03/critical-security-vulnerability-in-react-server-components.md index 5feb717c847..90a549bc2a2 100644 --- a/src/content/blog/2025/12/03/critical-security-vulnerability-in-react-server-components.md +++ b/src/content/blog/2025/12/03/critical-security-vulnerability-in-react-server-components.md @@ -94,8 +94,6 @@ npm install @vitejs/plugin-rsc@latest ### Expo {/*expo*/} -You only need to take action if you're using experimental RSC or Server Functions. - To learn more about mitigating, read the article on [expo.dev/changelog](https://expo.dev/changelog/mitigating-critical-security-vulnerability-in-react-server-components). ### Redwood SDK {/*update-redwood-sdk*/}