A maximum-severity vulnerability affecting the React JavaScript library is under attack by Chinese-nexus actors, further ...

Exploitation of an RCE flaw in a widely-used open source library is spreading quickly, with China-backed threat actors in the ...

Security community needs to rally and share more info faster, one researcher says Amid new reports of attackers pummeling a ...

A critical RCE flaw in React.js, dubbed React2Shell (CVE-2025-55182), has been disclosed with a maximum CVSS score of 10.0, ...

React patches a 10/10 flaw that can be used for remote code execution.

A newly discovered security flaw in the React ecosystem — one of the most widely used technologies on the web — is prompting ...

Bad actors that include nation-state groups to financially-motivated cybercriminals from across the globe are targeting the maximum-severity but easily exploitable React2Shell flaw, with threat ...

Sysdig finds evidence of Contagious Interview actors abusing React2Shell.

Cloudflare has blamed today's outage on the emergency patching of a critical React remote code execution vulnerability, which is now actively exploited in attacks.

Warnings continue to mount over a critical vulnerability in the widely used web application framework React, with threat ...

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday formally added a critical security flaw impacting ...

Attacks exploiting the recently emerged React vulnerability dubbed React2Shell appear to have been conducted by North Korean ...