近期，聚铭安全攻防实验室监测发现了一项与React Server Components相关的远程代码执行漏洞， 该漏洞已被披露，编号为 CVE-2025-55182，CVSS 评分为 10.0 。 该漏洞主要波及react-server-dom-webpack的Server Actions功能。由于在处理客户端提交的表单数据时，系统未能实施充分的安全性校验，导致攻击者能够通过精心设计的恶意表单请求 ...

此漏洞被披露为 CVE-2025-55182，并被评为 CVSS 10.0。React Server Functions 允许客户端调用服务器上的函数，React 将客户端的请求转换为 HTTP 请求，并将这些请求转发到服务器。在服务器上，React 将 HTTP 请求转换为函数调用，并将所需数据返回给客户端。 未经身份验证的攻击者可以构造一个恶意的 HTTP 请求，发送到任何 Server ...

Critical vulnerability in React library should be treated by IT as they did Log4j - as an emergency, warns one expert. Developers using the React 19 library for building application interfaces are ...

Facepalm: A widely used web technology is affected by a serious security vulnerability that can be exploited with minimal effort to compromise servers. Known as "React2Shell," the flaw may require ...

Critical React vulnerability tracked as CVE-2025-55182 and React2Shell can be exploited for unauthenticated remote code execution.

Hackers are exploiting a vulnerability in React to inject wallet-draining malware into cryptocurrency websites.

useState is the most well-known hook for using functional components in React, but it's just a start. Here are eight more React hooks, and how to use them. React remains the pacesetter among ...

Warnings continue to mount over a critical vulnerability in the widely used web application framework React, with threat ...