Critical RCE Vulnerabilities in React and Next.js(wiz.io)

113 points by gonepivoting 10 months ago | 50 comments

React2Shell and related RSC vulnerabilities threat brief(blog.cloudflare.com)

19 points by unknownhad 10 months ago | 1 comments

The React2Shell Story(lachlan.nz)

198 points by mufeedvh 5 months ago | 41 comments

RediShell: Critical remote code execution vulnerability in Redis(wiz.io)

111 points by mihau 1 year ago | 45 comments

NextJS Security Vulnerability(nextjs.org)

21 points by connor11528 10 months ago | 2 comments

Remote Unauthenticated Code Execution in OpenSSH Server(blog.qualys.com)

30 points by m1guelpf 2 years ago | 8 comments

RCE Vulnerability in React and Next.js(github.com)

559 points by rayhaanj 10 months ago | 214 comments

GitHub security advisory GHSA-9qr9-h5gf-34mp for a critical (CVSS 10.0) remote code execution vulnerability in React Server Components affecting Next.js, with patched versions listed.

React is winning by default and slowing innovation(lorenstew.art)

640 points by dbushell 1 year ago | 729 comments

A blog post arguing that React's dominance as the default frontend framework carries hidden costs and stifles innovation, urging deliberate framework choices.

I'm being cyberattacked by Tesla, Inc(dreamstation.systems)

389 points by robinpie 1 month ago | 109 comments

Personal blog post describing persistent attack traffic in nginx logs from IPs with Host/Referer headers pointing to pool-ntp.tesla.com.

Open Source is one person(opensourcesecurity.io)

325 points by LawnGnome 1 year ago | 132 comments

Blog post by Josh Bressers on Open Source Security arguing that many open source projects are maintained by a single person.

Io_uring, kTLS and Rust for zero syscall HTTPS server(blog.habets.se)

444 points by guntars 1 year ago | 138 comments

Blog post describing building an HTTPS web server in Rust using io_uring and kernel TLS to avoid system calls on the request path.

GitHub confirms breach of 3,800 repos via malicious VSCode extension(bleepingcomputer.com)

985 points by Timofeibu 5 months ago | 430 comments

BleepingComputer news article reporting that GitHub confirmed a breach of about 3,800 internal repositories via a malicious VSCode extension.