「React」に新たな脆弱性 ～「React2Shell」への対策は不十分、最新版 ...

UIライブラリ「React」（React.js）の開発チームは12月11日、「React Server ...

「React」「Next.js」に重大なリモートコード実行の脆弱性、CVSSの基本 ...

UIライブラリ「React」（React.js）および「Next.js」で、認証なしにリモートコード実行が可能になる重大なセキュリティ脆弱性「CVE-2025-55182」が存在することが明らかになった。この脆弱性は「React2Shell」とも呼ば ...
CSO Online

Developers urged to immediately upgrade React, Next.js

Critical vulnerability in React library should be treated by IT as they did Log4j - as an emergency, warns one expert.

Critical React, Next.js flaw lets hackers execute code on servers

A maximum severity vulnerability, dubbed 'React2Shell', in the React Server Components (RSC) 'Flight' protocol allows remote code execution without authentication in React and Next.js applications.
技術評論社

TypeScriptとReact/ Next. jsでつくる 実践Webアプリケーション開発

こんな方にオススメ モダンなWebフロントエンドに興味のある方 React/Next.jsを初めて使う方、本番に導入したい方 React/Next.jsとTypeScriptを組み合わせた開発スタイルに興味のある方 TypeScriptを中心に据えたWebフロントエンド開発に興味のある方 Atomic DesignやStorybookなど、コンポーネント中心の開発に ...
SecurityWeek

React2Shell: In-the-Wild Exploitation Expected for Critical React Vulnerability

Critical React vulnerability tracked as CVE-2025-55182 and React2Shell can be exploited for unauthenticated remote code ...
InfoWorld

Plug-and-play web development with Astro

Astro is a full-stack JavaScript meta-framework that orchestrates reactive view technologies like React and Svelte. While there are numerous meta-frameworks (examples include Next.js and Remix), Astro ...
Que.com on MSN

React and Next.js security risks: Addressing critical vulnerabilities now

In today’s rapidly evolving digital landscape, web developers seek technologies that offer speed, reliability, and flexibility. React and Next.js, two ...
heise online

Web development: Next.js 15.3 drives the Bundler Turbopack forward

With the webpack successor Turbopack, alpha builds are now possible and the TypeScript language service plug-in has become faster and more reliable. The React framework Next.js has reached version ...