New React vulns leak secrets, invite DoS attacks

And the earlier React2Shell patch is vulnerable

If you’re running React Server Components, you just can’t catch a break. In addition to already-reported flaws, newly discovered bugs allow attackers to hang vulnerable servers and potentially leak Server Function source code, so anyone using RSC or frameworks that support it should patch quickly.…

This article has been indexed from The Register – Security

Read the original article: