The JavaScript programming library React and certain apps created with it are vulnerable. Security updates are available for download.
Hackers are exploiting a vulnerability in React to inject wallet-draining malware into cryptocurrency websites.
In early December 2025, the React core team disclosed two new vulnerabilities affecting React Server Components (RSC). These issues – Denial-of-Service and Source Code Exposure were found by security ...