·4 min read
React2Shell and the Follow‑Ups: CVE-2025-55182, CVE-2025-55183, CVE-2025-55184
December 2025 brought a critical RCE in React Server Components and two follow-up issues (DoS + source exposure). Here’s what happened, who’s affected (including Next.js App Router), and what to upgrade.
Security
React