Cybersecurity industry overreacts to React vulnerability, starts panic, burns own house down again

<p>A few days ago, CVE-2025–55182 was revealed alongside an excellent write up: <a href="https://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components">https://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components</a></p><p>The disclosure write up is great — it’s full of facts, and explains when you are and aren’t vulnerable.</p><p>I do