flight - Grafex Media

Critical React Server Components Vulnerability ‘React2Shell’ Exposes Deep Deserialization Risks in Flight Protocol

A critical remote code execution (RCE) vulnerability, dubbed "React2Shell" and assigned a CVSS score of 10.0, has exposed profound structural risks within React Server Components (RSC) and their custom communication…

Laily UPN July 24, 2026

Web Development

Weaponizing and Defending the React Flight Protocol: Unpacking React2Shell and its Aftermath

The landscape of modern web development was significantly shaken in December 2025 with the disclosure of CVE-2025-55182, dubbed "React2Shell," an unauthenticated remote code execution (RCE) vulnerability that scored a critical…

Laily UPN July 23, 2026

Web Development

React2Shell: Unauthenticated Remote Code Execution in React Server Components’ Flight Protocol Exposes Structural Vulnerabilities

The custom streaming protocol underlying React Server Components, known as Flight, has been identified as a critical deserialization sink, leading to severe vulnerabilities including unauthenticated remote code execution (RCE). Security…

Suro Senen July 21, 2026