Resources for protecting against 'React2Shell'

Published: (December 5, 2025 at 08:00 AM EST)
1 min read

Source: Vercel Blog

Summary

As of December 4 at 21:04 UTC, various proof‑of‑concept (POC) exploits for are confirmed to be publicly available. This Common Vulnerabilities and Exposures (CVE) report also impacted between versions 15.0.0 and 16.0.6. CVE‑2025‑55182 affects all Next.js apps.

Read more

Back to Blog

Related posts

Read more »

Summary of CVE-2025-55182

Summary Impact Resolution Credit References A critical-severity vulnerability in React Server Components affects React 19 and frameworks that use it, including...