腾讯网

黑客利用JavaScript库部署加密钱包资金窃取程序

PANews 12月15日消息，据Finance Feeds报道，黑客利用了React ...

Critical React, Next.js flaw lets hackers execute code on servers

A maximum severity vulnerability, dubbed 'React2Shell', in the React Server Components (RSC) 'Flight' protocol allows remote code execution without authentication in React and Next.js applications.
FinanceFeeds

Hackers Exploit JavaScript Library to Deploy Crypto Wallet Drainers

Hackers exploit a critical React JavaScript vulnerability, CVE-2025-55182, to deploy crypto wallet drainers on legitimate websites ...

'Exploitation is imminent' as 39 percent of cloud environs have max-severity React hole

A maximum-severity flaw in the widely used JavaScript library React, and several React-based frameworks including Next.js ...

Critical vulnerability in React JS framework has a near 100% chance to be exploited

Researchers have uncovered a critical security flaw that could have catastrophic consequences for web and private cloud ...

React/Next.js 曝满分RCE漏洞，无需认证即可远程代码执行

近期，聚铭安全攻防实验室监测发现了一项与React Server Components相关的远程代码执行漏洞， 该漏洞已被披露，编号为 CVE-2025-55182，CVSS 评分为 10.0 。
Crypto News

Major JavaScript Library Breach Puts All Crypto Websites at Risk

React vulnerability CVE-2025-55182 exploited by crypto-drainers to execute remote code and steal funds from affected websites ...

React 警告关键高危漏洞：可未经身份验证远程执行代码，快快升级

11 月 29 日，Lachlan Davidson 报告了 React 中的一个安全漏洞，该漏洞允许通过利用 React 解码发送到 React Server Function 端点的有效负载的方式来 实现未经身份验证的远程代码执行 。
InfoQ中国 on MSN

紧急补丁——React服务器函数中的严重漏洞CVE-2025-55182被主动利用

11月29日， Lachlan Davidson 报告了React Server Components（RSC）中一个未经身份验证的远程代码执行（RCE）漏洞。该漏洞于12月3日公开披露，并被追踪为 CVE-2025-55182 ...
InfoQ中国 on MSN

Meta将把React迁移到Linux基金会

Meta将把React、React Native和JSX（JavaScript XML）贡献给一个新的React基金会，该基金会是Linux基金会的一部分，并表示“重要的是不要让任何一家公司或组织的代表过多。” React基金会将由亚马逊、Callstack、Expo、Meta、微软、Software ...