• react-class-variants 2.x: fixes ship in the newest alpha from next.
• react-tailwind-variants 1.x (legacy): fixes land on the v1-maintenance branch.

Report vulnerabilities privately through GitHub private vulnerability reporting and include a minimal reproduction. Do not open a public issue.