Product Security Advisories
Dexcom publishes product security advisories to provide timely, transparent information about security topics that may affect Dexcom products, services, or supporting technologies. This page is intended to help customers, partners, and other stakeholders stay informed about relevant advisories, Dexcom’s assessment of product impact, and any recommended actions when applicable.
Table of Advisories
First Post Date | Advisory Name | Last Update |
|---|---|---|
December 3, 2025 | December 3, 2025 |
React2Shell
Impact to Dexcom product and platform environment: None
Affected Versions:
- React Server DOM: 19.0.x – 19.2.x
Next.js with App Router: 14.x (canary), 15.x, 16.x
Frameworks bundling RSC (e.g., Vite, Parcel, RedwoodSDK) may also be impacted.
Current Status:
- No verified exploitable instances found in Dexcom production environments since React Server Components (RSC) and Next.js App Router are not in use and not referenced.
- Additional monitoring and WAF protections are in place.