Critical Security Vulnerability in React Server Components: CVSS 10.0 \ stacker news ~tech

pull down to refresh

Critical Security Vulnerability in React Server Components: CVSS 10.0 react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components

815 sats \ 3 comments \ @m0wer 3 Dec tech

view all related items

0 sats \ 1 reply \ @ek 3 Dec

Oof

100 sats \ 0 replies \ @m0wer OP 3 Dec

SN not affected😉

0 sats \ 0 replies \ @brent 4 Dec

React versions 19.x are affected, server-side.

If your app’s React code does not use a server, your app is not affected by this vulnerability. If your app does not use a framework, bundler, or bundler plugin that supports React Server Components, your app is not affected by this vulnerability.