zlacker

[parent] [thread] 1 comments
1. xnorsw+(OP)[view] [source] 2025-12-03 17:03:03
This is what coordinated disclosure looks like.
replies(1): >>karimf+M1
2. karimf+M1[view] [source] 2025-12-03 17:10:57
>>xnorsw+(OP)
Given that most Next.js and RSC apps run on Vercel, I’m wondering if they’re doing the same thing. There’s no information about this in their latest blog post [0].

Update: They do similar thing. Mentioned here [1]

[0] https://nextjs.org/blog/CVE-2025-66478

[1] https://vercel.com/changelog/cve-2025-55182

[go to top]