Vitejs Vite-plugin-react vulnerabilities

• vitejs vite-plugin-react @vitejs/plugin-rsc has Arbitrary File Read via `/__vite_rsc_findSourceMapURL` Endpoint on Development CVE-2025-68155 Fix available 7.5 HighDecember 16, 2025
• vitejs vite-plugin-react @vitejs/plugin-rsc Remote Code Execution through unsafe dynamic imports in RSC server function APIs on development server CVE-2025-67489 Fix available 9.8 CriticalDecember 8, 2025