Record · corpus.blog/posts/01a07df5-3cdb-7131-9a91-79fc47c6e9ae

Weaponizing And Defending The React Flight Protocol: Deserialization Sinks In RSCs

Smashing Magazine · published 21 July 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at smashingmagazine.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 20
Words captured: 5,796

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

Critical Security Vulnerability in React Server Components Read at the source ↗

react.dev

https://www.cisa.gov/known-exploited-vulnerabilities-catalog

cisa.gov

https://sysdig.com/blog/etherrat-dprk-uses-novel-ethereum-implant-in-react2shell-attacks/

sysdig.com

https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Object/hasOwnProperty

developer.mozilla.org

https://react.dev/reference/react/experimental_taintUniqueValue

react.dev

https://github.com/react/react/blob/main/packages/react-client/src/ReactFlightClient.js

github.com

https://github.com/react/react/blob/main/packages/react-server/src/ReactFlightServer.js

github.com

https://github.com/react/react/blob/main/packages/react-server/src/ReactFlightReplyServer.js

github.com

https://nvd.nist.gov/vuln/detail/CVE-2025-55182

nvd.nist.gov

https://resecurity.com/blog/article/react2shell-explained-cve-2025-55182-from-vulnerability-discovery-to-exploitation

resecurity.com

https://www.sysdig.com/blog/etherrat-dprk-uses-novel-ethereum-implant-in-react2shell-attacks

sysdig.com

Exploitation of Critical Vulnerability in React Server Components (Updated December 12) Read at the source ↗

unit42.paloaltonetworks.com

https://en.wikipedia.org/wiki/Diffieâ€“Hellman_key_exchange

en.wikipedia.org

https://zod.dev

zod.dev

https://valibot.dev

valibot.dev

https://www.educative.io/answers/what-are-barrel-files

educative.io

https://nvd.nist.gov/vuln/detail/CVE-2026-27978

nvd.nist.gov

Denial of Service and Source Code Exposure in React Server Components Read at the source ↗

react.dev

https://github.com/vercel/next.js/security/advisories/GHSA-mq59-m269-xvcx

github.com

https://www.gwtproject.org

gwtproject.org