Denial of service and source code exposure in React Server Components

react.dev

346 points

sangeeth96

6 months ago

See also: https://blog.cloudflare.com/react2shell-rsc-vulnerabilities-..., https://nextjs.org/blog/security-update-2025-12-11