3 ms·
This looks to be the same as the React RCE (https://news.ycombinator.com/item?id=46136026 https://news.ycombinator.com/item?id=46136026) but presumably it was N
by normie3000 11mo ago
This looks to be the same as the React RCE (https://news.ycombinator.com/item?id=46136026 https://news.ycombinator.com/item?id=46136026) but presumably it was NextJS's fault all along.
- embedding-shape 11mo ago> but presumably it was NextJS's fault all along. So lazy, why are you presuming so? You just had to get to the second paragraph of the article to avoid spewing FUD... > This vulnerability originates in the upstream React implementation (CVE-2025-55182
- tom1337 11mo agoThey are probably referring to Vercel playing a big part in the implementation of RSC and may be the ones who made that mistakes. Is it possible? Yes. Are there and sources for that take? None I could find.
- gcr 11mo agoIf anything, it’s exactly the opposite