React and next.js users - upgrade now
React and next.js users - upgrade now
www.cyber.gov.au /about-us/view-all-content/alerts-and-advisories/ongoing-targeting-of-online-code-repositories
Critical vulnerability CVE-2025-55182 found in react and next.js - allows pre-auth code execution on the server. Pretty widespread campaign at the moment targetting any and all websites.
The website above is official advisory - this is a good overview too https://youtu.be/iV48tEiHFDY