Next.js 发布了一款名为 fix-react2shell-next 的专用命令行工具,帮助开发者快速检测并修复高危"React2Shell"漏洞(CVE-2025-66478)。这款新型扫描器提供单行命令解决方案,可识别存在漏洞的 ...
Security researchers warn that hundreds of compromised Next.js devices are attacking others, and tens of thousands of servers ...
A maximum severity vulnerability, dubbed 'React2Shell', in the React Server Components (RSC) 'Flight' protocol allows remote code execution without authentication in React and Next.js applications.
Critical vulnerability in React library should be treated by IT as they did Log4j - as an emergency, warns one expert.
一些您可能无法访问的结果已被隐去。
显示无法访问的结果