Two critical vulnerabilities, CVE-2025-55182 and CVE-2025-66478, have been identified in React and NextJS. These issues arise from the Flight protocol used in React Server Components. When the react-server package processes a malformed payload, it fails to validate its structure effectively. This flaw can allow attackers to manipulate the internal logic of servers, leading to potential remote code execution.
Immediate Action Required
It is crucial for developers to update their systems immediately to mitigate these vulnerabilities. For a detailed list of affected versions and respective fixes, visit the official TabNews website.
Stay informed and protect your applications against these serious security threats!
