InfoWorld

The front-end architecture trilemma: Reactivity vs. hypermedia vs. local-first apps

Web developers are moving away from the library wars and into a world of architectural choice. It’s about where you want the ...

Mozilla launches Thunderbolt AI client with focus on self-hosted infrastructure

Mozilla is the latest legacy tech brand to make a play for the enterprise AI market. But the company behind Firefox and ...
Us Weekly

Celebrities React to Eric Dane’s Death at 53: Alyssa Milano, Ashton Kutcher, Maria Shriver and More

Celebrities are paying tribute to Grey’s Anatomy star Eric Dane after his death at age 53. Alyssa Milano, Ashton Kutcher and Maria Shriver led the tributes via social media as stars reacted to the ...
SecurityWeek

Critical React Native Vulnerability Exploited in the Wild

Albeit mainly considered a theoretical risk, the flaw has been exploited to disable protections and deliver malware. Tracked as CVE-2025-11953 (CVSS score of 9.8) and disclosed in early November, the ...
Bleeping Computer

Microsoft updates Windows DLL that triggered security alerts

Microsoft has resolved a known issue that was causing security applications to flag a core Windows component, the company said in a service alert posted this week. The list of affected systems is ...
CoinDesk

New React bug that can drain all your tokens is impacting 'thousands of' websites

A critical vulnerability in React Server Components is being actively exploited by multiple threat groups, putting thousands of websites — including crypto platforms — at immediate risk with users ...
Microsoft

Defending against the CVE-2025-55182 (React2Shell) vulnerability in React Server Components

CVE-2025-55182 (also referred to as React2Shell and includes CVE-2025-66478, which was merged into it) is a critical pre-authentication remote code execution (RCE) vulnerability affecting React Server ...
The Hacker News

New React RSC Vulnerabilities Enable DoS and Source Code Exposure

The React team has released fixes for two new types of flaws in React Server Components (RSC) that, if successfully exploited, could result in denial-of-service (DoS) or source code exposure. The team ...
Bleeping Computer

Critical React, Next.js flaw lets hackers execute code on servers

A maximum severity vulnerability, dubbed 'React2Shell', in the React Server Components (RSC) 'Flight' protocol allows remote code execution without authentication in React and Next.js applications.
Ars Technica

Admins and defenders gird themselves against maximum-severity server vuln

Security defenders are girding themselves in response to the disclosure of a maximum-severity vulnerability disclosed Wednesday in React Server, an open-source package that’s widely used by websites ...
InfoWorld

Developers urged to immediately upgrade React, Next.js

Critical vulnerability in React library should be treated by IT as they did Log4j - as an emergency, warns one expert. Developers using the React 19 library for building application interfaces are ...