News

The React2Shell Story

  • None--Lachlan.nz
  • published date: 2026-05-08 16:39:48 UTC

The story of CVE-2025-55182 (React2Shell)

On November 30th 2025, I reported a critical remote code execution vulnerability ("React2Shell") to Meta. On December 3rd, Meta released a fix and public advisory (CVE-2025-55182), urging developers … [+22657 chars]