Action required: React/Next.js CVE-2025-55184 and CVE-2025-55183
UpdateUnverifiedAdded Sep 24, 2026
Update (2025-12-12 00:41 UTC): The React and Next.js patches initially published on Dec. 11 at 21:10 incompletely addressed the vulnerabilities. A follow-up CVE was issued and follow-up patches have been released by the React and Next.js teams. All versions below have been updated accordingly.
Topics: Security
More Netlify releases
Every Netlify release| Date | Release | Type |
|---|---|---|
| Dec 11 | GPT-5.2 and GPT-5.2-Pro now available in AI Gateway and Agent Runnersunverified Update | Update |
| Dec 16 | AI Gateway now Generally Availableunverified GA | GA |
| Dec 16 | Observability is hereunverified Update | Update |
| Dec 16 | New Prerender extensionunverified GA | GA |
| Dec 17 | Gemini 3 Flash Preview now available in AI Gatewayunverified Preview | Preview |
| Dec 17 | GPT-image-1.5 now available in AI Gatewayunverified Update | Update |
| Dec 4 | GPT-5.1-Codex-Max now available in AI Gateway and Agent Runnersunverified Update | Update |
| Dec 3 | Netlify’s response to the critical React & Next.js security vulnerabilityunverified Update | Update |
Also shipped on Dec 11, 2025
Netlify in December 2025| Date | Company | Release | Product | Type |
|---|---|---|---|---|
| Dec 11 |  New Relic | Mobile Session Replay in Public Previewunverified | New Relic | Preview |
| Dec 11 |  Grafana Labs | Private Source Map Uploads now GAunverified | Grafana Cloud | GA |
| Dec 11 |  Deepgram | PHI Redaction Now Available for Batch and Streaming Speech-to-Textunverified | Deepgram | Update |
| Dec 11 |  Cloudflare | Logs - SentinelOne as Logpush destinationunverified | Cloudflare developer platform | Update |
| Dec 11 | Cloudflare | WAF - WAF Release - 2025-12-11 - Emergencyunverified | Cloudflare developer platform | Update |
| Dec 11 |  Linear | Linear agent for Intercom, Zendesk, Gongunverified | Linear | Update |
Sources: each vendor's own release notes, changelogs and GitHub releases, read daily to monthly by how often it posts. Logos via logo.dev; trademarks belong to their owners.