React

React Server Components Flight-Protocol Prototype Pollution RCE — "React2Shell" (CVE-2025-55182) new KEV RW EPSS 100%CVE-2025-55182webCRITICAL 10Patched2026-07-06TanStack Query — Unbounded Recursion Denial of Service in `replaceEqualDeep` (CVE-2026-26903) newCVE-2026-26903webMEDIUMPatched2026-07-05Appsmith Table Widget Stored XSS to Admin Account Takeover — CVE-2026-30862 newCVE-2026-30862webCRITICAL 9.1Patched2026-07-05React2Shell - Next.js RSC Unauthenticated RCE new KEV RW EPSS 100%CVE-2025-55182webCRITICAL 10Patched2026-05-17