React and Next.js are urging developers to immediately patch two additional, follow-up vulnerabilities that were discovered ...

Plane 1.2.0 rebuilt its frontend stack, migrating from Next.js to React Router and Vite, and fixed critical security ...

CISA warns that attackers are actively exploiting the React2Shell CVE-2025-55182 flaw, urging fast patching across vulnerable ...

As they work to fend off the rapidly expanding number of attempts by threat actors to exploit the dangerous React2Shell vulnerability, security teams are learning of two new flaws in React Server ...

Wiz says React2Shell attacks accelerating, ranging from cryptominers to state-linked crews Half of the internet-facing ...

As exploitation activity against CVE-2025-55182, researchers are finding some exploits contain bypasses for Web application firewall (WAF) rules.

11月29日，Lachlan Davidson报告了React Server ...

A sophisticated cyber-espionage campaign attributed to North Korean state-linked hackers has exploited a critical vulnerability in React Server Components to deploy a stealthy remote access trojan ...

React团队于12月3日发布了有史以来最严重的安全漏洞公告（CVE-2025-55182），该漏洞被评为CVSS 10.0分——最高风险等级。 这一被称为“React2shell”的漏洞，堪比一把开启服务器大门的“万能钥匙”，攻击者无需任何身份验证，仅需发送一个精心构造的HTTP请求，便可直接控制企业服务器。 安全研究员Defused指出，这是一个评分10.0的严重漏洞，并且已有野外利用的报告。

Following the critical vulnerability CVE-2025-55182 in React Server Components, researchers have found three new leaks. Two ...