Security Advisory: Critical RCE Vulnerabilities in React Server Components (CVE-2025-55182)

TL;DR On December 3, 2025, coordinated disclosures revealed that multiple releases of React 19 and Next.js contain a critical flaw in the React Server Components (RSC) “Flight” protocol, allowing unauthenticated remote code execution (RCE). The vulne...