> This page is for Developer.

> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.bigcommerce.com/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.bigcommerce.com/_mcp/server.

### Catalyst 1.3.6 Addresses Security Vulnerability

Catalyst v1.3.6 release addresses a **security vulnerability (**[**CVE-2025-55184, CVE-2025-55183**](https://react.dev/blog/2025/12/11/denial-of-service-and-source-code-exposure-in-react-server-components)**)** that affects React Server Components.

## **Key Changes**

* **Next.js 15.5.8**: Upgraded from Next.js 15.5.7 to 15.5.8

* **React 19**: Upgraded to React 19.1.3 and React DOM 19.1.3

## **Migration Guide**

Refer to the full [migration guide](/developer/docs/storefront/catalyst/release-notes/1-3-6) in our developer release notes.

## **Release Tags**

We have published new tags for the Core and Makeswift versions of Catalyst. Target these tags to pull the latest code:

* [**@bigcommerce/catalyst-core@1.3.6**](https://github.com/bigcommerce/catalyst/releases/tag/%40bigcommerce%2Fcatalyst-core%401.3.6)

* [**@bigcommerce/catalyst-makeswift@1.3.7**](https://github.com/bigcommerce/catalyst/releases/tag/%40bigcommerce%2Fcatalyst-makeswift%401.3.7)

And as always, you can pull the latest stable release with these tags:

* [**@bigcommerce/catalyst-core@latest**](https://github.com/bigcommerce/catalyst/releases/tag/%40bigcommerce%2Fcatalyst-core%40latest)

* [**@bigcommerce/catalyst-makeswift@latest**](https://github.com/bigcommerce/catalyst/releases/tag/%40bigcommerce%2Fcatalyst-makeswift%40latest)