React Server Components (RSC)
Published: December 15, 2025
Version: 1.0
Executive Summary
AvePoint is releasing this security advisory to inform customers that we are aware of the React Server Components CVE-2025-55182
Advisory Details
AvePoint products and infrastructure do not use React Server Components and are not affected by the incident. We are evaluating the risk to our supply chain for any possible indirect exposure to this vulnerability.
Suggested Actions
Security Actions - No additional action is required.
Mitigation Steps - No additional action is required.
AvePoint implements best-in-class techniques for identifying, protecting, and detecting cybersecurity threats.
The information security and data privacy of our customers is AvePoint’s highest priority. If you have any questions about this and/or you are contacted by anyone else about this issue, please contact our security team immediately at security@avepoint.com.
For your additional information please find AvePoint’s reporting policy and response plan:
https://www.avepoint.com/company/vulnerability-reporting-policy/