this post was submitted on 04 Dec 2025
21 points (92.0% liked)

Programming

23690 readers
246 users here now

Welcome to the main community in programming.dev! Feel free to post anything relating to programming here!

Cross posting is strongly encouraged in the instance. If you feel your post or another person's post makes sense in another community cross post into it.

Hope you enjoy the instance!

Rules

Rules

  • Follow the programming.dev instance rules
  • Keep content related to programming in some way
  • If you're posting long videos try to add in some form of tldr for those who don't want to watch videos

Wormhole

Follow the wormhole through a path of communities !webdev@programming.dev

founded 2 years ago
MODERATORS
snowe@programming.dev
Ategon@programming.dev
MaungaHikoi@lemmy.nz
UlrikHD@programming.dev
21
Critical RCE Vulnerabilities Discovered in React & Next.js (www.wiz.io)
submitted 5 hours ago by cm0002@lemmings.world to c/programming@programming.dev
5 comments fedilink hide all child comments
top 5 comments
sorted by: hot top controversial new old
[–] MonkderVierte@lemmy.zip 1 points 1 hour ago

Nothing new.

[–] vinnymac@lemmy.world 14 points 4 hours ago (1 children)

In case anyone wants to skip the weird ai content blog

Here is the source: https://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components

[–] BlueBockser@programming.dev 1 points 2 hours ago

I'm not sure I'd classify wiz as a "weird AI content blog", but I agree that it's good to get the information straight from the horse's mouth.

[–] FizzyOrange@programming.dev 4 points 4 hours ago

in the react-server package used by React Server Components (RSC).

[–] 30p87@feddit.org 0 points 5 hours ago

lol