Topic
Every article tagged Next.js Security, newest first.
The React2Shell saga continues with CVE-2025-55184. A new critical DDoS vulnerability in React Server Components allows unauthenticated attackers to crash servers via infinite loops. Update immediately.
React2Shell (CVE-2025-55182) exposes React Server Components to a critical Remote Code Execution flaw. Dive into the technical details, the exploitation mechanics, and the urgent remediation steps required to secure your infrastructure.
Looking for something specific?
Search every article by topic, tool or CVE.
Keep reading
Node.js CVE-2026-111497 exposes Brotli decoding to potential RCE. Check affected versions, fetch() exposure, WAF limits, and the October 2026 patch checklist.
PHP2Shell (CVE-2026-109618 & CVE-2026-109619) exposes 70% of the web to unauthenticated PHP RCE and memory leaks. Check fixed versions, IOCs, and mitigations.
Google Cloud VPC Service Controls now supports folder-level perimeters, folder and organization rules, PSC endpoints, service patterns, and guided violation remediation. Here are the technical details and YAML configs.