Merge pull request #6523 from github/AsapHogFtw-GHSA-fv66-9v8q-g76r

advisory-database[bot] · web-flow · commit ec99dcd598ee · 2025-12-09T16:53:25.000Z
diff --git a/advisories/github-reviewed/2025/12/GHSA-fv66-9v8q-g76r/GHSA-fv66-9v8q-g76r.json b/advisories/github-reviewed/2025/12/GHSA-fv66-9v8q-g76r/GHSA-fv66-9v8q-g76r.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-fv66-9v8q-g76r",
-  "modified": "2025-12-04T21:03:39Z",
+  "modified": "2025-12-04T21:03:40Z",
   "published": "2025-12-03T19:07:39Z",
   "aliases": [
     "CVE-2025-55182"
@@ -88,22 +88,41 @@
           "type": "ECOSYSTEM",
           "events": [
             {
-              "introduced": "19.0.0"
+              "introduced": "19.1.0"
             },
             {
-              "fixed": "19.0.1"
+              "fixed": "19.1.2"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "package": {
+        "ecosystem": "npm",
+        "name": "react-server-dom-turbopack"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "19.2.0"
+            },
+            {
+              "fixed": "19.2.1"
             }
           ]
         }
       ],
       "versions": [
-        "19.0.0"
+        "19.2.0"
       ]
     },
     {
       "package": {
         "ecosystem": "npm",
-        "name": "react-server-dom-turbopack"
+        "name": "react-server-dom-parcel"
       },
       "ranges": [
         {
@@ -122,7 +141,7 @@
     {
       "package": {
         "ecosystem": "npm",
-        "name": "react-server-dom-turbopack"
+        "name": "react-server-dom-parcel"
       },
       "ranges": [
         {
@@ -144,7 +163,7 @@
     {
       "package": {
         "ecosystem": "npm",
-        "name": "react-server-dom-parcel"
+        "name": "react-server-dom-turbopack"
       },
       "ranges": [
         {
@@ -173,35 +192,38 @@
           "type": "ECOSYSTEM",
           "events": [
             {
-              "introduced": "19.1.0"
+              "introduced": "19.0.0"
             },
             {
-              "fixed": "19.1.2"
+              "fixed": "19.0.1"
             }
           ]
         }
+      ],
+      "versions": [
+        "19.0.0"
       ]
     },
     {
       "package": {
         "ecosystem": "npm",
-        "name": "react-server-dom-parcel"
+        "name": "react-server-dom-webpack"
       },
       "ranges": [
         {
           "type": "ECOSYSTEM",
           "events": [
             {
-              "introduced": "19.2.0"
+              "introduced": "19.0.0"
             },
             {
-              "fixed": "19.2.1"
+              "fixed": "19.0.1"
             }
           ]
         }
       ],
       "versions": [
-        "19.2.0"
+        "19.0.0"
       ]
     }
   ],

Original file line number	Diff line number	Diff line change
`@@ -1,7 +1,7 @@`
`1`	`1`	`{`
`2`	`2`	`"schema_version": "1.4.0",`
`3`	`3`	`"id": "GHSA-fv66-9v8q-g76r",`
`4`		`- "modified": "2025-12-04T21:03:39Z",`
	`4`	`+ "modified": "2025-12-04T21:03:40Z",`
`5`	`5`	`"published": "2025-12-03T19:07:39Z",`
`6`	`6`	`"aliases": [`
`7`	`7`	`"CVE-2025-55182"`
`@@ -88,22 +88,41 @@`
`88`	`88`	`"type": "ECOSYSTEM",`
`89`	`89`	`"events": [`
`90`	`90`	`{`
`91`		`- "introduced": "19.0.0"`
	`91`	`+ "introduced": "19.1.0"`
`92`	`92`	`},`
`93`	`93`	`{`
`94`		`- "fixed": "19.0.1"`
	`94`	`+ "fixed": "19.1.2"`
	`95`	`+ }`
	`96`	`+ ]`
	`97`	`+ }`
	`98`	`+ ]`
	`99`	`+ },`
	`100`	`+ {`
	`101`	`+ "package": {`
	`102`	`+ "ecosystem": "npm",`
	`103`	`+ "name": "react-server-dom-turbopack"`
	`104`	`+ },`
	`105`	`+ "ranges": [`
	`106`	`+ {`
	`107`	`+ "type": "ECOSYSTEM",`
	`108`	`+ "events": [`
	`109`	`+ {`
	`110`	`+ "introduced": "19.2.0"`
	`111`	`+ },`
	`112`	`+ {`
	`113`	`+ "fixed": "19.2.1"`
`95`	`114`	`}`
`96`	`115`	`]`
`97`	`116`	`}`
`98`	`117`	`],`
`99`	`118`	`"versions": [`
`100`		`- "19.0.0"`
	`119`	`+ "19.2.0"`
`101`	`120`	`]`
`102`	`121`	`},`
`103`	`122`	`{`
`104`	`123`	`"package": {`
`105`	`124`	`"ecosystem": "npm",`
`106`		`- "name": "react-server-dom-turbopack"`
	`125`	`+ "name": "react-server-dom-parcel"`
`107`	`126`	`},`
`108`	`127`	`"ranges": [`
`109`	`128`	`{`
`@@ -122,7 +141,7 @@`
`122`	`141`	`{`
`123`	`142`	`"package": {`
`124`	`143`	`"ecosystem": "npm",`
`125`		`- "name": "react-server-dom-turbopack"`
	`144`	`+ "name": "react-server-dom-parcel"`
`126`	`145`	`},`
`127`	`146`	`"ranges": [`
`128`	`147`	`{`
`@@ -144,7 +163,7 @@`
`144`	`163`	`{`
`145`	`164`	`"package": {`
`146`	`165`	`"ecosystem": "npm",`
`147`		`- "name": "react-server-dom-parcel"`
	`166`	`+ "name": "react-server-dom-turbopack"`
`148`	`167`	`},`
`149`	`168`	`"ranges": [`
`150`	`169`	`{`
`@@ -173,35 +192,38 @@`
`173`	`192`	`"type": "ECOSYSTEM",`
`174`	`193`	`"events": [`
`175`	`194`	`{`
`176`		`- "introduced": "19.1.0"`
	`195`	`+ "introduced": "19.0.0"`
`177`	`196`	`},`
`178`	`197`	`{`
`179`		`- "fixed": "19.1.2"`
	`198`	`+ "fixed": "19.0.1"`
`180`	`199`	`}`
`181`	`200`	`]`
`182`	`201`	`}`
	`202`	`+ ],`
	`203`	`+ "versions": [`
	`204`	`+ "19.0.0"`
`183`	`205`	`]`
`184`	`206`	`},`
`185`	`207`	`{`
`186`	`208`	`"package": {`
`187`	`209`	`"ecosystem": "npm",`
`188`		`- "name": "react-server-dom-parcel"`
	`210`	`+ "name": "react-server-dom-webpack"`
`189`	`211`	`},`
`190`	`212`	`"ranges": [`
`191`	`213`	`{`
`192`	`214`	`"type": "ECOSYSTEM",`
`193`	`215`	`"events": [`
`194`	`216`	`{`
`195`		`- "introduced": "19.2.0"`
	`217`	`+ "introduced": "19.0.0"`
`196`	`218`	`},`
`197`	`219`	`{`
`198`		`- "fixed": "19.2.1"`
	`220`	`+ "fixed": "19.0.1"`
`199`	`221`	`}`
`200`	`222`	`]`
`201`	`223`	`}`
`202`	`224`	`],`
`203`	`225`	`"versions": [`
`204`		`- "19.2.0"`
	`226`	`+ "19.0.0"`
`205`	`227`	`]`
`206`	`228`	`}`
`207`	`229`	`],`