React2Shell, and the weekend I spent patching for it

On Wednesday evening (3 December) the React team published an advisory that I had to read twice. CVE-2025-55182, which everyone is now calling React2Shell, is unauthenticated remote code execution in