# Major CVE for react.js

**URL:** <https://discourse.nodered.org/t/major-cve-for-react-js/99866>\
**Category:** General\
**Tags:** security\
**Created:** [4 December 2025 14:39 UTC](https://discourse.nodered.org/t/major-cve-for-react-js/99866 "2025-12-04T14:39:12Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![JayDickson](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/jaydickson/32/90592_2.png) [@JayDickson](https://discourse.nodered.org/u/JayDickson)\
**Post date:** [4 December 2025 14:39 UTC](https://discourse.nodered.org/t/major-cve-for-react-js/99866/1 "2025-12-04T14:39:13Z")

</div>

Just a heads up for anyone using react.js in their projects, a major vulnerability was discovered and you should be taking steps to protect yourself.

> **[Critical RCE Vulnerabilities Discovered in React & Next.js | Wiz Blog](https://www.wiz.io/blog/critical-vulnerability-in-react-cve-2025-55182)**
>
> React and Next.js are exposed to critical unauthenticated RCE via CVE-2025-55182 and CVE-2025-66478. Learn which versions are impacted and how to mitigate.

---

<div class="post-metadata">

**Author:** ![TotallyInformation](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/totallyinformation/32/31_2.png) [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)\
**Post date:** [4 December 2025 19:48 UTC](https://discourse.nodered.org/t/major-cve-for-react-js/99866/2 "2025-12-04T19:48:33Z")

</div>

Thanks for the callout.

Thankfully, I've never liked REACT so never use it. 😃

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/1X/d073cd938eafa2e558d7c2cd59003b3ef4963033.png) [@system](https://discourse.nodered.org/u/system)\
**Post date:** [4 March 2026 19:49 UTC](https://discourse.nodered.org/t/major-cve-for-react-js/99866/3 "2026-03-04T19:49:15Z")

</div>

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.