Techzine Europe

Three new vulnerabilities discovered in React Server Components

Following the critical vulnerability CVE-2025-55182 in React Server Components, researchers have found three new leaks. Two ...

GMOサイバーセキュリティ byイエラエ、「GMOサイバー攻撃 ネットde ...

［GMOインターネットグループ］CVSSスコア10.0、危険度最高レベルの脆弱性への早期対策を支援　GMOインターネットグループのGMOサイバーセキュリティ byイエラエ株式会社（※1）（代表取締役CEO：牧田 誠　以下、GMOサイバーセキュリティ byイエラエ）は、2025年12月3日、外部公開IT資産を自動で棚卸し・可視化するアタックサーフェスマネジメント(※2)（Attack Surface ...
TechTargetジャパン

任意コード実行でWebアプリを危険にさらす「React2Shell」 日本でも ...

2025年12月初め、JavaScriptライブラリ「React」に脆弱性「React2Shell」が見つかり、現在、攻撃活動が広がりつつある。JPCERT/CCによると、日本でも被害が確認されている。 セキュリティ専門家は、「React2Shell ...
Cybernews

React, Next.js disclose follow-up vulnerabilities, again urge users to patch immediately

React and Next.js are urging developers to immediately patch two additional, follow-up vulnerabilities that were discovered ...
Security Boulevard

Denial-of-Service and Source Code Exposure in React Server Components

In early December 2025, the React core team disclosed two new vulnerabilities affecting React Server Components (RSC). These issues – Denial-of-Service and Source Code Exposure were found by security ...
Security Boulevard

React Fixes Two New RSC Flaws as Security Teams Deal with React2Shell

As they work to fend off the rapidly expanding number of attempts by threat actors to exploit the dangerous React2Shell vulnerability, security teams are learning of two new flaws in React Server ...

Jira Alternative: Plane 1.2.0 Migrates from Next.js to React Router and Vite

Plane 1.2.0 rebuilt its frontend stack, migrating from Next.js to React Router and Vite, and fixed critical security ...