Next.js React Server Components Remote Code Execution Vulnerability (CVE-2025-66478) #29219
Description
Self Checks
- I have read the Contributing Guide and Language Policy.
- This is only for bug report, if you would like to ask a question, please head to Discussions.
- I have searched for existing issues search for existing issues, including closed ones.
- I confirm that I am using English to submit this report, otherwise it will be closed.
- 【中文用户 & Non English User】请使用英语提交，否则会被关闭 ：）
- Please do not modify this template :) and fill in all the required fields.
Dify version
1.10
Cloud or Self Hosted
Self Hosted (Docker)
Steps to reproduce
Using Docker image version 1.10 may trigger the CVE-2025-66478 vulnerability, which could result in malware being implanted into the Docker web container.
✔️ Expected Behavior
Will not be infected by remote virus implantation.
❌ Actual Behavior
No response