{"uuid": "93bb5820-af4f-4d3e-b11b-708ead5c10d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-55182", "type": "seen", "source": "https://t.me/pphm_HackerNews/1177", "content": "Critical React Server Flaw Rapidly Weaponized by Sophisticated Attack Groups\n\nA newly disclosed flaw in React Server Components (RSC), tracked as CVE-2025-55182 and unofficially dubbed React2Shell, allows attackers to execute arbitrary code on servers without authentication. The vulnerability affects React 19.x and downstream frameworks (e.g. Next.js 15.x/16.x when using App Router, or any setup using the vulnerable RSC packages: react-server-dom-parcel, react-server-dom-turbopack, or react-server-dom-webpack).\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-22T05:00:03.765179Z"}