There is critical vulnerability in React Server Components disclosed as CVE-2025-55182 that impacts React 19 and frameworks that use it. A fix has been published in React versions 19.0.1, 19.1.2, and 19.2.1. We recommend upgrading immediately. react.dev/blog/2025/12...
Post
react.devCritical Security Vulnerability in React Server Components – ReactThe library for web and native user interfaces
Thank you to the React and Next.js teams for involving us early and for the clear communication. We were able to patch our network ahead of disclosure to help keep our customers secure. bsky.app/profile/netl...
A critical vulnerability was recently disclosed in React Server Components (RSC), impacting multiple versions of React, Next.js and other RSC-based frameworks. This flaw could allow malicious actors to execute arbitrary code within an affected application. 🧵
1 repost17 likes
No replies yet.