feat: sec avoid vulnerable version of react (#2452)

LoicDaval-Amadeus · web-flow · commit dea5ea6d136f · 2025-12-09T14:54:40.000+02:00
diff --git a/.changeset/twelve-sheep-shake.md b/.changeset/twelve-sheep-shake.md
@@ -0,0 +1,5 @@
+---
+"@redocly/cli": patch
+---
+
+Updated React dependency to avoid vulnerable React version (19.0.0) affected by CVE-2025-55182.
diff --git a/package-lock.json b/package-lock.json
diff --git a/packages/cli/package.json b/packages/cli/package.json
@@ -55,8 +55,8 @@
     "https-proxy-agent": "^7.0.5",
     "mobx": "^6.0.4",
     "pluralize": "^8.0.0",
-    "react": "^17.0.0 || ^18.2.0 || ^19.0.0",
-    "react-dom": "^17.0.0 || ^18.2.0 || ^19.0.0",
+    "react": "^17.0.0 || ^18.2.0 || ^19.2.1",
+    "react-dom": "^17.0.0 || ^18.2.0 || ^19.2.1",
     "redoc": "2.5.1",
     "semver": "^7.5.2",
     "set-cookie-parser": "^2.3.5",
@@ -72,8 +72,8 @@
     "@types/cookie": "0.6.0",
     "@types/har-format": "^1.2.16",
     "@types/pluralize": "^0.0.29",
-    "@types/react": "^17.0.0 || ^18.2.21 || ^19.0.0",
-    "@types/react-dom": "^17.0.0 || ^18.2.7 || ^19.0.0",
+    "@types/react": "^17.0.0 || ^18.2.21 || ^19.2.1",
+    "@types/react-dom": "^17.0.0 || ^18.2.7 || ^19.2.1",
     "@types/semver": "^7.5.0",
     "@types/set-cookie-parser": "2.4.10",
     "@types/yargs": "17.0.32",

-Original file line number
+Diff line change
@@ @@ -0,0 +1,5 @@ @@
 +---
 +"@redocly/cli": patch
 +---
++
 +Updated React dependency to avoid vulnerable React version (19.0.0) affected by CVE-2025-55182.