この記事は会員限定です。会員登録（無料）すると全てご覧いただけます。 Devographicsは2026年2月3日（米国時間）、JavaScriptの利用動向に関する年次調査「State of JavaScript 2025」の結果を発表した。

Last week, we published CVE-2025-29927 and patched a critical severity vulnerability in Next.js. Here’s our post-incident analysis and next steps. On 27 Feb 2025 06:03:00 GMT, the vulnerability was ...

Rapid7 is warning customers of two notable (unrelated) vulnerabilities in Next.js, a React framework for building web applications, and CrushFTP, a file transfer technology that has previously been ...

Remote code execution (RCE) vulnerabilities pose significant security threats, including data breaches, service outages, ransomware deployment, and unauthorized lateral movement across. Following the ...

A maximum-severity security flaw has been disclosed in React Server Components (RSC) that, if successfully exploited, could result in remote code execution. The vulnerability, tracked as ...

Following the React2Shell disclosure, increased community research into React Server Components surfaced two additional vulnerabilities that require patching: a high-severity Denial of Service ...

Artificial intelligence and its promise to revolutionize programming—and possibly overthrow human sovereignty—is a central story of the post-Covid world. But for JavaScript developers, it is only one ...

A maximum severity vulnerability, dubbed 'React2Shell', in the React Server Components (RSC) 'Flight' protocol allows remote code execution without authentication in React and Next.js applications.