https://pwn.watch/t/react Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them. en Thu, 22 Oct 2026 16:23:59 GMT https://pwn.watch/i/react2shell-react-server-components-cve-2025-55182 react2shell-react-server-components-cve-2025-55182:2025-12-12:Unit 42 updates its threat brief on ongoing exploitation Fri, 12 Dec 2025 00:00:00 GMT critical Source: https://unit42.paloaltonetworks.com/cve-2025-55182-react-and-cve-2025-66478-next/ Status: closed, patched https://pwn.watch/i/react2shell-react-server-components-cve-2025-55182 react2shell-react-server-components-cve-2025-55182:2025-12-05:CISA adds CVE-2025-55182 to KEV Fri, 05 Dec 2025 00:00:00 GMT critical Status: closed, patched https://pwn.watch/i/react2shell-react-server-components-cve-2025-55182 react2shell-react-server-components-cve-2025-55182:2025-12-03:React discloses a critical vulnerability in React Server Components and ships fixes Wed, 03 Dec 2025 00:00:00 GMT critical Source: https://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components Status: closed, patched https://pwn.watch/i/react2shell-react-server-components-cve-2025-55182 react2shell-react-server-components-cve-2025-55182:2025-12-03:AWS sees China-nexus groups exploiting it within hours Wed, 03 Dec 2025 00:00:00 GMT critical Including Earth Lamia and Jackpot Panda. Source: https://aws.amazon.com/blogs/security/china-nexus-cyber-threat-groups-rapidly-exploit-react2shell-vulnerability-cve-2025-55182/ Status: closed, patched