[GHSA-fv66-9v8q-g76r] React Server Components are Vulnerable to RCE

[mnahkies]

Updates

• Affected products

Comments
I've updated to the fixed version 19.0.1 but Github, and pnpm audit still report it as not fixed. I believe this is because of the affected version being =19.0 rather than =19.0.0, as =19.0 includes both 19.0.0 and 19.0.1

[github]

Hi there @zpao! A community member has suggested an improvement to your security advisory. If approved, this change will affect the global advisory listed at github.com/advisories. It will not affect the version listed in your project repository.

This change will be reviewed by our Security Curation Team. If you have thoughts or feedback, please share them in a comment here! If this PR has already been closed, you can start a new community contribution for this advisory

[zpao]

Recommend closing this in favor of #6494 which was the first to submit this change.