Is Your Next.js App Still Exposed? A Practical Guide to the 2025–26 React Server Component CVEs
React2Shell was only the start. Here’s what changed between December 2025 and May 2026, and how to check and patch your app in under an hour. In early December 2025, a lot of teams had the same weekend. A critical flaw in React Server Components, soon nicknamed React2Shell, was rated 10.0 out of 10. That […]
