3 ms·
So they are part of the standard distribution (like through npm install react), but are unused by default? Something like that?
by TZubiri 11mo ago
So they are part of the standard distribution (like through npm install react), but are unused by default? Something like that?
- danabramov 11mo agoThis code doesn’t exist in `react` or `react-dom`, no. Packages are released in lockstep to avoid confusion which is why everything got a version bump. The vulnerable packages are the ones starting with `react-server-` (like `react-server-dom-webpack') or anything that vendors their code (like `next` does).