News for hackers. Stuff that matters.

A comment on RCE Vulnerability in React and Next.js. Parent comment

Re:RCE Vulnerability in React and Next.js by Tomuus on Thursday December 04, 2025 @03:53AM (#46145294)
This POC is not realistic and doesn't work against production builds of Next.js. It requires explicit exposure of gadgets by the user (eg. vm.runInContext) so is invalid as noted on https://react2shell.com
[ Parent | on HN ]

There are no comments on this comment yet.