News for hackers. Stuff that matters.

A comment on Critical RCE Vulnerabilities in React and Next.js. Parent comment

Re:Critical RCE Vulnerabilities in React and Next.js by karimf on Wednesday December 03, 2025 @12:49PM (#46137575)
When I saw "WIZ Research - Critical Vulnerabilities in React and Next.js" on the big image banner, I immediately thought that Wiz found the vulnerability.
[ Parent | on HN ]
Re:Critical RCE Vulnerabilities in React and Next.js by jfindper on Wednesday December 03, 2025 @01:09PM (#46137839)
When Reuters has an article that says "Reuters Business - Interest rates going up", do you think Reuters made the interest rates go up themselves or that they are reporting on the interest rates?
[ Parent | on HN ]
Re:Critical RCE Vulnerabilities in React and Next.js by acdha on Wednesday December 03, 2025 @02:35PM (#46138923)
Reuters isn’t a bank. Wiz is a security company so they have a greater responsibility to distinguish between their own original work and discoveries made by other researchers.
[ Parent | on HN ]
Re:Critical RCE Vulnerabilities in React and Next.js by jfindper on Wednesday December 03, 2025 @03:15PM (#46139485)
They do that by saying "we discovered this" when they discover it.
[ Parent | on HN ]