We deployed an urgent security update for a critical vulnerability in React Server Components (CVE-2025-55182) that affects React 19 and related frameworks.

What we fixed

  • Updated to the latest secure version of Next.js to patch CVE-2025-66478.

  • Applied React security fixes for CVE-2025-55182.

  • Strengthened server component security across the application.

No action is needed. The update is deployed for all Babbily users.