A React szerveroldali komponenseiben lévő sérülékenység lehetővé teszi a kód futtatását a szerveren.
A React Server Components (RSC) web framework has fixed a vulnerability (CVE-2025-55182) that allowed arbitrary code execution on the server through a request sent to the server handler. The vulnerability has been assigned a critical threat level (10 out of 10). This vulnerability is manifested in the experimental components react-server-dom-webpack, react-server-dom-parcel, and react-server-dom-turbopack, which are used for executing functions and creating UI elements on the server, not on the side of […]
