PT-2026-109636

Name of the Vulnerable Software and Affected Versions @progress/kendo-react-charts versions 1.1.0 through 16.1.x Description The default Chart tooltip renders formatted point values as raw HTML without encoding in both single-point and shared tooltips. An attacker with low privileges who can...

GHSA-9FFP-22J7-56R2 JHipster: Generated Applications Allow Stored XSS via Unrestricted Blob ContentType Opened as Same-Origin Blob

Summary Applications generated by generator-jhipster v9.2.0 can persist user-controlled Blob ContentType values and later use those values as the MIME type for client-side Blob objects. The shared generated openFile helper creates an object URL from the Blob and opens it in a new window. For...

JHipster: Generated Applications Allow Stored XSS via Unrestricted Blob ContentType Opened as Same-Origin Blob

Summary Applications generated by generator-jhipster v9.2.0 can persist user-controlled Blob ContentType values and later use those values as the MIME type for client-side Blob objects. The shared generated openFile helper creates an object URL from the Blob and opens it in a new window. For...

NPM: JHipster: Generated Applications Allow Stored XSS via Unrestricted Blob ContentType Opened as Same-Origin Blob

NPM: JHipster: Generated Applications Allow Stored XSS via Unrestricted Blob ContentType Opened as Same-Origin Blob vulnerability discovered by ? in WordPress Npm react-jhipster versions = 1.0.3...

react2shell-scanner

react2shell-scanner Triage scanner for CVE-2025-55182 R...

ROOT-APP-NPM-CVE-2026-22029 CVE-2026-22029 in @remix-run/router - Patched by Root

Root has patched CVE-2026-22029 in the @remix-run/router package for Root:npm. Multiple fixed versions available...

PT-2026-108100

Name of the Vulnerable Software and Affected Versions generator-jhipster versions prior to 9.4.0 react-jhipster versions prior to 1.1.0 Description Applications generated by the platform can persist attacker-controlled Blob data and companion ContentType values, which are then returned through...

EUVD-2026-91668

Next.js: Pending use cache fill can leak Draft Mode content into regular responses and persisted pages...

Origin Validation Error

Overview payload is a Node, React and MongoDB Headless CMS and Application Framework Affected versions of this package are vulnerable to Origin Validation Error via getExternalFile in packages/payload/src/uploads/getExternalFile.ts, where the origin of an external file request URL is not validate...

Security Bulletin:React Router Open Redirect and XSS Vulnerability Fixed in 7.13.0

Summary React Router is a router for React. In versions 6.30.2 through 6.30.4 and 7.9.6 through 7.12.0, applications that allow open redirects are vulnerable to XSS. An attacker could craft a malicious link that redirects users to an unexpected external site or that exploits an XSS vector.This...

Security Bulletin:React Router SSR Error Handling Vulnerability in Versions 6.4.0 to 7.17.0

Summary React Router is a router for React. In versions 6.4.0 through 7.17.0, if application code was written in a way that allows attacker-supplied input to overwrite certain aspects of errors caught by the SSR process, then it was possible for an attacker to trigger unexpected constructor...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 — "Ghost Action" React2Shell React Server Co...

[SECURITY] Fedora 45 Update: ocaml-react-1.2.2-23.fc45

React is an OCaml module for functional reactive programming FRP. It provides support to program with time varying values : declarative events and signals. React doesn't define any primitive event or signal; it lets the client choose the concrete timeline. React is made of a single, independent...

React Router Vulnerable to Cross-Site Scripting (XSS) via Redirect Location Mishandling (CVE-2026-22029)

React Router is a router for React. In @remix-run/router version prior to 1.23.2 and react-router 7.0.0 through 7.11.0, React Router and Remix v1/v2 SPA open navigation redirects originating from loaders or actions in Framework Mode, Data Mode, or the unstable RSC modes can result in unsafe URLs...

Next.js 15.5.6 Remote Code Execution

Next.js version 15.5.6 is affected by an unauthenticated remote code execution vulnerability in React Server Components request deserialization. This CTF deployment exposes a Server Action endpoint to demonstrate the issue...

proof-of-exploit

Proof of Exploit Takes a public security advisory, reproduces...

react2shell-poc

React2Shell - CVE-2025-55182 PoC Prueba de concepto para CVE-2025-55182 , una vulnerabilidad crítica de ejecución remota de código no autenticada en React Server Components. Puntuación CVSS: 10.0 Crítica Vulnerabilidad La vulnerabilidad se encuentra en el deserializador del protocolo Flight de...

React2Shell RCE (CVE-2025-55182)

Exploits CVE-2025-55182 React2Shell via React Flight multipart deserialization. Targets Next.js App Router and React Server Components endpoints using the prefix / formData gadget chain. !/usr/bin/env python3 -- coding: utf-8 -- """React2Shell pre-auth RCE CVE-2025-55182 on Next.js / React Server...

React2Shell CVE-2025-55182 Detection

Detects CVE-2025-55182 React2Shell by sending a safe React Flight multipart payload that evaluates 77+1 via the prefix gadget. Positive when the response reflects RSC deserialization behaviour. !/usr/bin/env python3 -- coding: utf-8 -- """Detect React2Shell CVE-2025-55182 on Next.js / React Serve...

CVE-2025-55182

CVE-2025-55182 — React2Shell Esecuzione remota di codice RCE pre-autenticazione in React Server Components RSC, Next.js e framework correlati. Panoramica CVE-2025-55182 nota anche come React2Shell è una vulnerabilità critica di RCE pre-autenticazione che colpisce l'ecosistema React Server...