Recent update in Firebase Studio IDE online - What i need to update and republish

General
,
1

I was working on my project, i ignored the error, “Security Check Recommended (CVE-2025-55182): “, Currently i read this error (image below). Can anyone here explain this error or troubleshoot steps and solution to update ?

erroride
erroride1792×675 57.8 KB

1 Like
3

Hi AB_Anu,

The current versions of React and Next.js have security vulnerabilities and you need to upgrade, all you need to do is copy that message and feed it to Gemini and it’ll know what to do.

It’ll upgrade your project dependencies and then you can publish once it’s done, once this is done that’s all, nothing else to do. Just ignore the message.

To be sure you are on track you can ask Gemini which versions of Next.js or React your project runs on (if you are running on any of these, if not ignore everything all together). Ensure the response tallies with the versions displayed in the message at the top of your screen.

I hope this helps

Emmanuel.

2 Likes
4

npx --yes fix-react2shell-next

1 Like
5

error I got - npx fix-react2shell-next

fix-react2shell-next - Next.js vulnerability scanner

Checking for 4 known vulnerabilities:

- CVE-2025-66478 (critical): Remote code execution via crafted RSC payload

  • CVE-2025-55184 (high): DoS via malicious HTTP request causing server to hang and consume CPU
  • CVE-2025-55183 (medium): Compiled Server Action source code can be exposed via malicious request
  • CVE-2025-67779 (high): Incomplete fix for CVE-2025-55184 DoS via malicious RSC payload causing infinite loop

No package.json files found in current directory.

error 2 - npx --yes fix-react2shell-next

fix-react2shell-next - Next.js vulnerability scanner

Checking for 4 known vulnerabilities:

- CVE-2025-66478 (critical): Remote code execution via crafted RSC payload

  • CVE-2025-55184 (high): DoS via malicious HTTP request causing server to hang and consume CPU
  • CVE-2025-55183 (medium): Compiled Server Action source code can be exposed via malicious request
  • CVE-2025-67779 (high): Incomplete fix for CVE-2025-55184 DoS via malicious RSC payload causing infinite loop

No package.json files found in current directory. error 3 - i tried to find package.json, i created new project for nodejs, the rebuild environment by install - npm install -g npm@11.7.0 , but i got this error npx fix-react2shell-next

fix-react2shell-next - Next.js vulnerability scanner

Checking for 4 known vulnerabilities:

  • CVE-2025-66478 (critical): Remote code execution via crafted RSC payload
  • CVE-2025-55184 (high): DoS via malicious HTTP request causing server to hang and consume CPU
  • CVE-2025-55183 (medium): Compiled Server Action source code can be exposed via malicious request
  • CVE-2025-67779 (high): Incomplete fix for CVE-2025-55184 DoS via malicious RSC payload causing infinite loop

Found 1 package.json file(s)

No vulnerable packages found!
Your project is not affected by any known vulnerabilities.

1 Like
6

Even gemini failed to find the error.

1 Like
7

Your project is python based so nothing to worry about, as another user mentioned, this message is only impacting React and Node environments. You can dismiss it.

If you’d like to learn more about said CVE security vulnerability(ies) you can look up YouTube videos and as Gemini or DeepSeek or your preferred LLM around the specific on and other cybersecurity topics!

happy to help further if you have more questions.