THE RECENT CVES IN REACT AND NODE.JS WERE FOUND BY AN AI

Summary from the TLDR Dev newsletter

An AI system autonomously found real zero-days in Node.js and React, such as a sandbox escape via Unix sockets and a DoS that could crash any Next.js app, by performing a full security researcher workflow without human help. LLM hallucination, usually a liability, turns into a strength for imagining creative attack scenarios that traditional scanners miss.