The React2Shell Story
The story of CVE-2025-55182 (React2Shell)
On November 30th 2025, I reported a critical remote code execution vulnerability ("React2Shell") to Meta. On December 3rd, Meta released a fix and public advisory (CVE-2025-55182), urging developers … [+22657 chars]