6 ms·
Do you have a public source about an embargo period for this one? I wasn't able to find one
by flaminHotSpeedo 10mo ago
Do you have a public source about an embargo period for this one? I wasn't able to find one
- Pharaoh2 10mo agohttps://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components https://react.dev/blog/2025/12/03/critical-security-vulnerab... Privately Disclosed: Nov 29 Fix pushed: Dec 1 Publicly disclosed: Dec 3
- drysart 10mo agoThen even in the worst case scenario, they were addressing this issue two days after it was publicly disclosed. So this wasn't a "rush to fix the zero day ASAP" scenario, which makes it harder to justify ignoring errors that started occuring in a small scale rollout.
- charcircuit 10mo agoConsidering there were patched libraries at the time of disclosure, those libraries' authors must have been informed ahead of time.