{"id":"86","createdAt":"2025-12-12T11:34:26.569Z","updatedAt":"2025-12-15T07:04:56.785Z","content":"React Server Components(RSC)와 관련된 심각한 보안 취약점이 발견되어, 관련 보안 패치가 권고되었습니다!\n\n- [CVE-2025-55182](https://nvd.nist.gov/vuln/detail/CVE-2025-55182)\n- [CVE-2025-55183](https://www.cve.org/CVERecord?id=CVE-2025-55183)\n- [CVE-2025-55184](https://www.cve.org/CVERecord?id=CVE-2025-55184)\n- [CVE-2025-66478](https://nvd.nist.gov/vuln/detail/CVE-2025-66478)\n- [CVE-2025-67779](https://www.cve.org/CVERecord?id=CVE-2025-67779)\n\n해당 취약점들은 사전 인증 원격 코드 실행(Pre-Authentication Remote Code Execution, RCE) 공격으로 이어질 수 있는 위험성을 내포하고 있으므로, 영향을 받는 버전의 모든 개발 프로젝트는 심각한 보안 사고 예방을 위해 아래의 즉시 해결 버전으로 업데이트해야 ㅎㅂ니다.\n\n

\n\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n

제품명	영향받는 버전	해결 버전
\n react-server-dom-parcel \n react-server-dom-webpack \n react-server-dom-turbopack\n	19.0	19.0.3
19.1.0 ~ 19.1.1	19.1.4
19.2.0	19.2.3
next	14.x, >=13.3	14.2.35
15.0.x	15.0.7
15.1.x	15.1.11
15.2.x	15.2.8
15.3.x	15.3.8
15.4.x	15.4.10
15.5.x	15.5.9
16.0.x	16.0.10

\n\n```bash --caption=React 관련 패키지 업데이트\nnpm update react-server-dom-webpack react-server-dom-parcel react-server-dom-turbopack\n```\n\n```bash --caption=Next.js 업데이트\nnpm i next@latest\n# 또는\nnpx fix-react2shell-next\n```\n\n- [Denial of Service and Source Code Exposure in React Server Components](https://react.dev/blog/2025/12/11/denial-of-service-and-source-code-exposure-in-react-server-components)\n- [Next.js Security Update: December 11, 2025](https://nextjs.org/blog/security-update-2025-12-11)","title":"🚨 React(Next.js) 서버 컴포넌트 보안 취약점 긴급 업데이트 권고","isPublished":true,"tags":["React","Next"],"views":7625,"comments":0,"like":0}