/ Blog

Follow and Subscribe

React2Shell Continued: What to know and do about the 2 latest CVEs

Fastly Security Research Team

Fastly Security Research Team, Fastly

In the wake of the critical severity React2Shell CVEs, two new CVEs exploiting similar Next.js and React components were announced on December 11. Learn more about these new CVEs.

December 11, 2025

All blog posts