Security alerts
What to fix right now.
Short alerts when a serious flaw hits sites like yours: what happened, who is affected, how to check your site and what to do. The important ones from the past year are here too, in case you missed them. Every alert cites its official sources.
Security alerts
December 2025
React2Shell: critical flaw in React and Next.js, update and rotate secrets
Exploited in the wild since December 2025, CVE-2025-55182 lets anyone run code on servers using React Server Components.
