React2Shell (CVE-2025-55182/CVE-2025-66478)

What?

A 10.0 critical severity vulnerablility affecting server-side use of React.js, tracked as:

• CVE-2025-55182 in React.js
• CVE-2025-66478 specifically for the Next.js framework

Am I affected?

Refer to vendor advisories.

How?

Watch this space.