Sharing my experiences and learnings.
December 10, 2025
A step-by-step walkthrough of CVE-2025-55182, a 10.0-severity remote code execution vulnerability in React's Flight protocol, tracing the exploit chain inside ReactFlightReplyServer.js and explaining how React fixed it.
