React2Shell Security Bulletin

T1Critical 95Covered by 1 source · first reported by Vercel (blog + changelog) at 05 Dec 2025, 13:00 UTC

CVE-2025-55182 is a critical vulnerability in React that requires immediate action. Next.js and other frameworks that React are affected. Read the bulletin and act now. Read more

security

Sources

T1React2Shell Security BulletinVercel (blog + changelog)05 Dec 2025, 13:00

Vulnerabilities

CVE-2025-55182

Why this score

Signals contributing to the severity score
Signal	Points
kev added	50
kev short fuse — 7 days to remediate	15
kev ransomware	10
public poc — 458 repositories	20