近期，聚铭安全攻防实验室监测发现了一项与React Server Components相关的远程代码执行漏洞， 该漏洞已被披露，编号为 CVE-2025-55182，CVSS 评分为 10.0 。
A maximum-severity flaw in the widely used JavaScript library React, and several React-based frameworks including Next.js ...
PANews 12月15日消息，据Finance Feeds报道，黑客利用了React ...
A maximum severity vulnerability, dubbed 'React2Shell', in the React Server Components (RSC) 'Flight' protocol allows remote code execution without authentication in React and Next.js applications.
Researchers have uncovered a critical security flaw that could have catastrophic consequences for web and private cloud ...
Security and developer teams are scrambling to address a highly critical security flaw in frameworks tied to the popular React JavaScript library. Not only is the vulnerability, which also is in the ...
11 月 29 日，Lachlan Davidson 报告了 React 中的一个安全漏洞，该漏洞允许通过利用 React 解码发送到 React Server Function 端点的有效负载的方式来 实现未经身份验证的远程代码执行 。
React vulnerability CVE-2025-55182 exploited by crypto-drainers to execute remote code and steal funds from affected websites ...
A critical RCE flaw in React.js, dubbed React2Shell (CVE-2025-55182), has been disclosed with a maximum CVSS score of 10.0, ...
Hackers exploit a critical React JavaScript vulnerability, CVE-2025-55182, to deploy crypto wallet drainers on legitimate websites ...
InfoQ中国 on MSN
Meta将把React迁移到Linux基金会
Meta将把React、React Native和JSX（JavaScript XML）贡献给一个新的React基金会，该基金会是Linux基金会的一部分，并表示“重要的是不要让任何一家公司或组织的代表过多。” React基金会将由亚马逊、Callstack、Expo、Meta、微软、Software ...
InfoQ中国 on MSN
紧急补丁——React服务器函数中的严重漏洞CVE-2025-55182被主动利用
11月29日， Lachlan Davidson 报告了React Server Components（RSC）中一个未经身份验证的远程代码执行（RCE）漏洞。该漏洞于12月3日公开披露，并被追踪为 CVE-2025-55182 ...
一些您可能无法访问的结果已被隐去。
显示无法访问的结果