React2Shell exploitation undergoes significant change in threat activity

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Escalation of React2Shell Exploitation Following CVE-2025-55182 Disclosure A critical vulnerability in React Server Components, identified as CVE-2025-55182, was publicly disclosed on December 3, 2025. Following its disclosure, exploitation activity has increased significantly, affecting millions of developers who are urged to patch to secure versions 19.0.1, 19.1.2, or 19.2.1 to mitigate risks. The vulnerability was added to the CISA KEV list on December 5, 2025, indicating active exploitation. 5 sources 25