#prototype-pollution

[ follow ]
#remote-code-execution #axios #vulnerability #cve-2026-40175 #react-server-components #cve-2025-55182 #nextjs
fromNist
1 week ago
Node JS

NVD

Axios library versions prior to 1.15.0 are vulnerable to Prototype Pollution, leading to Remote Code Execution and Full Cloud Compromise.
Information security
fromInfoQ
4 months ago

Patch Urgently - Critical Vulnerability CVE-2025-55182 in React Server Functions Actively Exploited

Unauthenticated RCE (CVE-2025-55182) in React Server Components affects React 19.0.0–19.2.0 and Next.js 15/16 App Router; patch immediately.
[ Load more ]