Skip to content

Conversation

@vercel
Copy link
Contributor

@vercel vercel bot commented Dec 20, 2025

Important

This is an automatic PR generated by Vercel to help you with patching efforts. We can't guarantee it's comprehensive, and it may contain mistakes. Please review our guidance before merging these changes.

A critical remote code execution (RCE) vulnerability in React Server Components, impacting frameworks such as Next.js, was identified in the project kkuko-utils. The vulnerability enables unauthenticated RCE on the server via insecure deserialization in the React Flight protocol.

This issue is tracked under:

This automated pull request upgrades the affected React and Next.js packages to patched versions that fully remediate the issue.

More Info | [email protected]

Updated dependencies to fix Next.js and React CVE vulnerabilities.

The fix-react2shell-next tool automatically updated the following packages to their secure versions:
- next
- react-server-dom-webpack
- react-server-dom-parcel  
- react-server-dom-turbopack

All package.json files have been scanned and vulnerable versions have been patched to the correct fixed versions based on the official React advisory.

Co-authored-by: Vercel <vercel[bot]@users.noreply.github.com>
@vercel
Copy link
Contributor Author

vercel bot commented Dec 20, 2025

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Review Updated (UTC)
kkuko-utils Ready Ready Preview, Comment Dec 20, 2025 1:28pm

@github-actions
Copy link
Contributor

Test Results

85 tests   85 ✅  32s ⏱️
 9 suites   0 💤
 1 files     0 ❌

Results for commit 4d119bb.

@github-actions
Copy link
Contributor

🧪 Test Results & Coverage Report

✅ All Tests Passed! (85/85)

🎉 Great work! All your tests are passing.

📋 Test Suites Summary

Test Suite Tests Status Duration
jest tests 85/85 18808ms

🔍 Detailed Test Results

jest tests (85/85 passed, 18808ms)

✅ KoreanMission 초기 렌더링이 정상적으로 되는지 확인 (85ms)
✅ KoreanMission 1미 포함 체크박스가 정상적으로 동작하는지 확인 (200ms)
✅ KoreanMission 미션 글자 표시 체크박스가 정상적으로 동작하는지 확인 (64ms)
✅ KoreanMission 정렬 모드 체크박스가 정상적으로 동작하는지 확인 (78ms)
✅ KoreanMission 파일 내용이 없을 때 단어 추출 버튼이 비활성화되는지 확인 (27ms)
✅ KoreanMission 파일 업로드 후 단어 추출이 정상적으로 동작하는지 확인 (172ms)
✅ KoreanMission 단어 추출 결과에 따라 다운로드 버튼이 활성화되는지 확인 (151ms)
✅ KoreanMission 1미 포함 옵션이 제대로 적용되는지 확인 (168ms)
✅ KoreanMission 다운로드 기능이 정상적으로 동작하는지 확인 (207ms)

📋 View detailed workflow results

📊 Code Coverage Report

Metric Coverage Status
Lines 9.43% (660/6993) 🔴 Poor
Statements 9.18% (712/7754) 🔴 Poor
Functions 7.81% (131/1676) 🔴 Poor
Branches 7.22% (278/3846) 🔴 Poor

🔴 Low Coverage: 8.4%

Your code coverage is below recommended levels. Please add more tests.

📂 Coverage by File (144 files tested)

Click to expand file-by-file coverage
File Lines Functions Branches Statements
...ils/app/components/ui/radio-group.tsx 🟢 100% 🟢 100% 🟢 100% 🟢 100%
...ko-utils/kkuko-utils/app/lib/utils.ts 🟢 100% 🟢 100% 🟢 100% 🟢 100%
...pp/manager-tool/extract/loop/Loop.tsx 🟢 90.9% 🟢 90.47% 🟡 84% 🟡 89.88%
...pp/manager-tool/extract/endx/EndX.tsx 🟡 89.28% 🟠 75% 🟡 84% 🟡 86.88%
...pp/manager-tool/extract/lenx/LenX.tsx 🟡 89.28% 🟡 83.33% 🟡 83.33% 🟡 88.52%
...anager-tool/extract/startx/StartX.tsx 🟡 89.28% 🟠 75% 🟡 84% 🟡 86.88%
...ct/english-mission/EnglishMission.tsx 🟡 85.24% 🟡 84.61% 🟠 70.83% 🟡 85.29%
...t/korean-mission-b/KoreanMissionB.tsx 🟡 84.46% 🟠 76.92% 🔴 64.58% 🟡 83.03%
...act/components/FileContentDisplay.tsx 🟡 82.53% 🟡 83.33% 🟠 79.31% 🟡 83.33%
.../manager-tool/extract/merge/Merge.tsx 🟠 78.03% 🟠 73.07% 🟠 76.56% 🟠 78.83%
...nager-tool/extract/loop/HelpModal.tsx 🟠 76.92% 🔴 60% 🔴 0% 🟠 76.92%
...ract/korean-mission/KoreanMission.tsx 🔴 52.9% 🔴 54.05% 🔴 38.88% 🔴 50.24%
...ls/kkuko-utils/app/lib/collections.ts 🔴 48.38% 🔴 46.66% 🔴 25% 🔴 48.48%
...-utils/kkuko-utils/app/lib/DuemLaw.ts 🔴 47.22% 🔴 50% 🔴 40% 🔴 44.73%
...o-utils/kkuko-utils/app/AutoLogin.tsx 🔴 0% 🔴 0% 🔴 0% 🔴 0%
... and 129 more files

📈 Recommendations

Consider improving test coverage for:

  • 📄 AutoLogin.tsx (0% lines covered)
  • 📄 ErrorPage.tsx (0% lines covered)
  • 📄 Home.tsx (0% lines covered)

🤖 Automated report | ⏱️ Generated: 2025. 12. 20. 오후 10:28:00 KST | 🔄 Workflow: Run Tests on main PR

@hafskjfha hafskjfha marked this pull request as ready for review December 20, 2025 13:30
@hafskjfha hafskjfha merged commit b795278 into main Dec 20, 2025
4 checks passed
@hafskjfha hafskjfha deleted the vercel/react-server-components-cve-vu-u3jrda branch December 20, 2025 13:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants