Update - Our review shows the affected React packages are present only in non-production amazee.io resources.
Dec 15, 2025 - 16:50 UTC
Update - We are continuing to monitor for any further issues.
Dec 05, 2025 - 07:23 UTC
Monitoring - Summary
We are aware of CVE-2025-55182, a critical vulnerability impacting certain versions of React Server Components and Next.js. Our priority is to protect customer workloads while upstream patches are applied.
What we've done
For customers using the Advanced WAF solution provided by amazee.io, we have enabled virtual patching in blocking mode to mitigate exploit attempts while application upgrades proceed. At this time, there is no mitigation available at the CDN layer.
Customer action
If your applications use affected React packages or frameworks (for example, Next.js 15.x or 16.x App Router), upgrade to patched versions as soon as possible per vendor guidance.
* Continue standard secure development practices and monitor your application logs for anomalies. * Virtual patches reduce risk, but code upgrades remain the definitive fix.
Support
If you have questions about exposure, upgrade paths, or rule coverage, contact our support team through your standard channel.
Our Commitment
Security is central to our mission. We continuously work to strengthen protections, reduce risk, and keep our customers informed.
We are conducting regular maintenance on our systems. This can lead to short interruptions for connections with the dashboard, logging system and API. Posted on
Jan 12, 2026 - 20:00 UTC
We are conducting regular maintenance on our systems. This can lead to short interruptions for connections with the dashboard, logging system and API. Posted on
Jan 12, 2026 - 20:00 UTC
Completed -
The scheduled maintenance has been completed.
Jan 15, 02:00 UTC
In progress -
Scheduled maintenance is currently in progress. We will provide updates as necessary.
Jan 14, 21:00 UTC
Scheduled -
We are conducting regular maintenance on our systems. This can lead to short interruptions for connections with the dashboard, logging system and API.
Jan 5, 20:00 UTC
Completed -
The scheduled maintenance has been completed.
Jan 14, 02:00 UTC
In progress -
Scheduled maintenance is currently in progress. We will provide updates as necessary.
Jan 13, 21:00 UTC
Scheduled -
We are conducting regular maintenance on our systems. This can lead to short interruptions for connections with the dashboard, logging system and API.
Jan 5, 20:00 UTC
Completed -
The scheduled maintenance has been completed.
Jan 8, 02:00 UTC
In progress -
Scheduled maintenance is currently in progress. We will provide updates as necessary.
Jan 7, 21:00 UTC
Scheduled -
We are conducting regular maintenance on our systems. This can lead to short interruptions for connections with the dashboard, logging system and API.
Dec 29, 20:00 UTC
Completed -
The scheduled maintenance has been completed.
Jan 7, 02:00 UTC
In progress -
Scheduled maintenance is currently in progress. We will provide updates as necessary.
Jan 6, 21:00 UTC
Scheduled -
We are conducting regular maintenance on our systems. This can lead to short interruptions for connections with the dashboard, logging system and API.
Dec 29, 20:00 UTC