vitejs vite-plugin-react

• CVE-2025-68155 High 7.5 @vitejs/plugin-rsc has Arbitrary File Read via `/__vite_rsc_findSourceMapURL` Endpoint on Development 0.5%
• CVE-2025-67489 Critical 9.8 @vitejs/plugin-rsc Remote Code Execution through unsafe dynamic imports in RSC server function APIs on development server 0.8%