fromThisweekinreact
3 days agoThis Week In React #262: React2Shell, Fate, TanStack AI, React Grab, Formisch, Base UI | React Native 0.83, Reanimated 4.2, State of RN, Refined, Crypto, Worklets, Sheet Navigator | CSS, Temporal, Supply Chain, Firefox | This Week In React
React2Shell - CVE-2025-55182 In case you missed my email, a 10.0-scored vulnerability affecting React Server Components was unveiled last week. And it's a really nasty one, enabling unauthenticated remote code execution with a simple HTTP request. Many React meta-frameworks and custom setups are affected, in particular Next.js (v14-canary, v15, v16). If your app is affected, you really need to upgrade now!
React



