Patch FlightReplyServer with fixes from ReactFlightClient by sebmarkbage · Pull Request #35277 · react/react

Netlify's response to the critical React security vulnerability

Netlify has patched a critical remote code execution vulnerability in React Server Functions. All Netlify customers are protected.

Critical Security Vulnerability in React Server Components

Discuss @tom.sherman.is's post on Frontpage.

Common Sense Refactoring of a Messy React Component | Alex Kondov

One thing I've learned from all the consulting I've done is that rewrites rarely lead to anything good. Almost in all cases, when you have an application runnin

Critical Security Vulnerability in React Server Components – React

The library for web and native user interfaces

GitHub - lachlan2k/React2Shell-CVE-2025-55182-original-poc: Original Proof-of-Concept's for React2Shell CVE-2025-55182

Original Proof-of-Concept's for React2Shell CVE-2025-55182 - lachlan2k/React2Shell-CVE-2025-55182-original-poc

Railway on Twitter / X

A critical RCE vulnerability was discovered in React Server Components. Railway has collaborated with Meta/Vercel teams & deployed a platform-level patch that blocks malicious requests matching this exploit pattern at our Web Application Firewall.Your service is protected while… https://t.co/8a5WWYshzN— Railway (@Railway) December 3, 2025

[BUG] AskUserQuestion: "No response after 60s — continued without an answer" · Issue #73125 · anthropics/claude-code

Preflight Checklist I have searched existing issues and this hasn't been reported yet This is a single bug report (please file separate reports for different bugs) I am using the latest version...

Build custom React components | Retool Docs

Learn how to develop and deploy custom React components for Retool apps.

Build custom React components | Retool Docs

Learn how to develop and deploy custom React components for Retool apps.

High Fidelity Detection Mechanism for RSC/Next.js RCE (CVE-2025-55182 & CVE-2025-66478) › Searchlight Cyber

This morning, an advisory was released for Next.js about a vulnerability that leads to RCE in default configurations, with no prerequisites. The root cause of this issue lies in React Server Components, which Next.js utilizes. Over the last day, we have noticed an incredible amount of incorrect PoCs floating around on GitHub that do not

replacements.fyi - performant, safer npm package alternatives

Find more performant and safer replacements for outdated or unnecessary npm packages.

Connect any React application to an MCP server in three lines of code

We're open-sourcing use-mcp, a React library that connects to any MCP server in just 3 lines of code, as well as our AI Playground, a complete chat interface that can connect to remote MCP servers.

[BUG] Version 2.0.61 is extremely slow and causes rapid, excessive token consumption/rate limits · Issue #13466 · anthropics/claude-code

Preflight Checklist I have searched existing issues and this hasn't been reported yet This is a single bug report (please file separate reports for different bugs) I am using the latest version...

GitHub - fatguru/CVE-2025-55182-scanner: A non-intrusive surface scanner for CVE-2025-55182 (React Server Components RCE). Detects exposed RSC endpoints in React 19 and Next.js applications

A non-intrusive surface scanner for CVE-2025-55182 (React Server Components RCE). Detects exposed RSC endpoints in React 19 and Next.js applications - fatguru/CVE-2025-55182-scanner