新型恶意软件PCPcat通过针对性利用Next.js和React框架中的关键漏洞，在48小时内成功入侵了超过5.9万台服务器。该恶意软件利用两个关键漏洞（CVE-2025-29927和CVE-2025-66478）攻击Next.js部署环境，这些漏洞允许未经身份验证的远程代码执行。

A maximum severity vulnerability, dubbed 'React2Shell', in the React Server Components (RSC) 'Flight' protocol allows remote code execution without authentication in React and Next.js applications.

The explosive, easy-to-trigger vulnerability was exploited within hours of disclosure, exposing the risks of default ...

The outstanding winner of the new study is n8n, a project for workflow automation using AI. It received over 100,000 GitHub ...

These four reactive frameworks are all popular options for building dynamic, scalable web apps in JavaScript. Here's help choosing the right one for you. The last time I compared the leading reactive ...