Security NEXT

深刻な「React」脆弱性、米当局が悪用に注意呼びかけ

米当局は、JavaScriptライブラリ「React」の一部コンポーネントに深刻な脆弱性「CVE-2025-55182」が判明した問題で、同脆弱性が悪用されているとして注意喚起を行った。

GMOサイバーセキュリティ byイエラエ、「GMOサイバー攻撃 ネットde ...

CVSSスコア10.0、危険度最高レベルの脆弱性への早期対策を支援 GMOインターネットグループのGMOサイバーセキュリティ byイエラエ株式会社（※1）（代表取締役CEO：牧田 誠 以下、GMOサイバーセキュリティ ...
SecurityWeek

React2Shell: In-the-Wild Exploitation Expected for Critical React Vulnerability

Critical React vulnerability tracked as CVE-2025-55182 and React2Shell can be exploited for unauthenticated remote code execution.
Infosecurity Magazine

React.js Hit by Maximum-Severity 'React2Shell' Vulnerability

A critical RCE flaw in React.js, dubbed React2Shell (CVE-2025-55182), has been disclosed with a maximum CVSS score of 10.0, posing severe risks for server-side implementations ...

「React」に新たな脆弱性 ～「React2Shell」への対策は不十分、最新版 ...

UIライブラリ「React」（React.js）の開発チームは12月11日、「React Server ...
TechSpot

Critical vulnerability in React JS framework has a near 100% chance to be exploited

Facepalm: A widely used web technology is affected by a serious security vulnerability that can be exploited with minimal effort to compromise servers. Known as "React2Shell," the flaw may require ...
ScanNetSecurity

React Server Components に信頼できないデータをデシリアライズする脆弱性

JavaScriptライブラリ「React」のサーバ機能に関するコンポーネント React Server Components ...
InfoWorld

Intro to Alpine.js: A JavaScript framework for minimalists

Alpine.js is a front-end JavaScript framework fashioned like a lightweight backpack, with a minimalist API and thoughtful features. Let's give it a try. I recently backpacked through Big Sur, and ...

'Exploitation is imminent' as 39 percent of cloud environs have max-severity React hole

A maximum-severity flaw in the widely used JavaScript library React, and several React-based frameworks including Next.js ...