diff --git a/src/blog/v2-14-0/v2-14-0.md b/src/blog/v2-14-0/v2-14-0.md
index ee70afb4..b8510e9f 100644
--- a/src/blog/v2-14-0/v2-14-0.md
+++ b/src/blog/v2-14-0/v2-14-0.md
@@ -11,6 +11,12 @@ Parcel v2.14.0 introduces beta support for React Server Components, which can be
 
 ## React Server Components
 
+> UPDATE
+>
+> On 2025/12/03 a critical vulnerability was uncovered in React Server Components. https://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components
+>
+> Ensure you're up to date with the latest fixes, especially [react-server-dom-parcel](https://vercel.com/changelog/cve-2025-55182#impact)
+
 Parcel v2.14.0 introduces beta support for [React Server Components](/recipes/rsc/), a new type of component that renders ahead of time, on the server or at build time. Server Components seamlessly integrate client and server code in one unified component tree, helping reduce client bundle sizes by pre-rendering non-interactive components.
 
 Unlike other RSC implementations, Parcel is not a full framework. Instead, it provides the tools you need to build your own application or framework from scratch with much less work. This gives you freedom to experiment with new patterns, or integrate Server Components into an existing app without a major rewrite.