corpus.blog
41,554 blogs · 4,969,865 posts Claim your blog
Record · corpus.blog/posts/01a0b87b-2ea3-72e6-99b3-011d3f8c479a

Critical vulnerability in React and Next.js (CVE-2025-55182)

vulncheck.com · published 3 December 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at vulncheck.com Wayback capture
1blogs citing
First cited
14 Dec 2025
Most recent
14 Dec 2025
Rank this month
not ranked
External links
14
Words captured
1,614

Cited by

Blog
In the post
Date
alonso.network
The Next.js Turducken Read at the source ↗
14 Dec 2025

Links from this post

Link
Host
https://github.com/lachlan2k/React2Shell-CVE-2025-55182-original-poc
github.com
https://gist.github.com/maple3142/48bc9393f45e068cf8c90ab865c0f5f3
gist.github.com
Denial of Service and Source Code Exposure in React Server Components Read at the source ↗
react.dev
https://github.com/facebook/react/pull/35277/files
github.com
https://aws.amazon.com/blogs/security/china-nexus-cyber-threat-groups-rapidly-exploit-react2shell-vulnerability-cve-2025-55182/
aws.amazon.com
React2Shell Security Bulletin
vercel.com
Critical Security Vulnerability in React Server Components Read at the source ↗
react.dev
https://github.com/facebook/react/releases/tag/v19.0.1
github.com
https://github.com/facebook/react/releases/tag/v19.1.2
github.com
https://github.com/facebook/react/releases/tag/v19.2.1
github.com
https://github.com/vercel/next.js/security/advisories/GHSA-9qr9-h5gf-34mp
github.com
https://www.cve.org/CVERecord?id=CVE-2025-66478
cve.org
https://github.com/lachlan2k/React2Shell-CVE-2025-55182-original-poc/blob/main/01-submitted-poc.js
github.com
https://slcyber.io/research-center/high-fidelity-detection-mechanism-for-rsc-next-js-rce-CVE-2025-55182-CVE-2025-66478/
slcyber.io
Elsewhere on vulncheck.com (10)