BleepingComputer

RondoDox botnet exploits React2Shell flaw to breach Next.js servers

The RondoDox botnet has been observed exploiting the critical React2Shell flaw (CVE-2025-55182) to infect vulnerable Next.js servers with malware and cryptominers. First documented by Fortinet in July ...
Chosunbiz

Node2Shell flaw lets attackers hijack Node.js servers; KISA urges updates

Node2Shell flaw lets attackers hijack Node.js servers; KISA urges updates KISA warns of high‑risk Node2Shell bug in Node.js, ...

Node.js Working Behind the Scenes of Web Development: From Its Relationship with JavaScript to Preparation for Verification, Inspection, and Deployment

What runs on the screens of websites and web services is JavaScript inside the viewer's browser. However, during the development phase of those pages, "Node.js," which runs outside the browser, is ...
Cyber Security News

React Server Components Flaw Lets Attackers Freeze Next.js Servers With a Single POST Request

A high-severity React Server Components DoS flaw lets attackers freeze vulnerable Next.js servers with crafted POST requests.
The Hacker News

Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing

Next.js patches two critical RCE flaws involving typed arrays and SVG processing, plus a Server Actions DoS affecting App Router apps.