Mum, wake up — a new React vulnerability just dropped… and it’s causing useEffects on everyone.
Researchers have found two new vulnerabilities in React Server Components while attempting to exploit the patches last week.
These are new issues, separate from the critical CVE last week. The patch for React2Shell remains effective for the Remote Code Execution exploit.