REACT2SHELL: IN-THE-WILD EXPLOITATION EXPECTED FOR CRITICAL REACT VULNERABILITY

Summary from the TLDR InfoSec newsletter

A critical flaw in React 19, dubbed React2Shell, allows attackers to execute code remotely on applications that use newer server-side features and common frameworks. Many cloud environments are reportedly exposed. Vendors are already shipping detection and protection rules.