Product Security Advisories
Dexcom publishes product security advisories to provide timely, transparent information about security topics that may affect Dexcom products, services, or supporting technologies. This page is intended to help customers, partners, and other stakeholders stay informed about relevant advisories, Dexcom’s assessment of product impact, and any recommended actions when applicable.
Table of Advisories
First Post Date | Advisory Name | Last Update |
|---|---|---|
December 3, 2025 | December 3, 2025 | |
October 27, 2026 | October 27, 2026 |
React2Shell
Impact to Dexcom product and platform environment: None
Affected Versions:
- React Server DOM: 19.0.x – 19.2.x
Next.js with App Router: 14.x (canary), 15.x, 16.x
Frameworks bundling RSC (e.g., Vite, Parcel, RedwoodSDK) may also be impacted.
Current Status:
- No verified exploitable instances found in Dexcom production environments since React Server Components (RSC) and Next.js App Router are not in use and not referenced.
- Additional monitoring and WAF protections are in place.
PHP2Shell
Impact to Dexcom product and platform environment: None
Affected Versions:
- Affected releases include PHP 8.2 prior to 8.2.35, 8.3 prior to 8.3.36, 8.4 prior to 8.4.27, and 8.5 prior to 8.5.12, along with older releases without applicable security fixes.
Current Status:
- No impact to Dexcom products has been identified. We continue to monitor our environment and relevant security advisories.