A package with 26 million weekly downloads carried a major flaw which has since been addressed.
CVE-2025-55182, a critical RCE vulnerability in React Server Components, is ringing alarm bells among cyber experts.