Do It by Code
54 subscribers
710 photos
99 videos
14 files
1.24K links
We uhhhhh... do things by coding them.
Download Telegram
memos
An open-source, lightweight note-taking solution. The pain-less way to create your meaningful notes. Your Notes, Your Way

GitHub: usememos/memos

#go #react #self_host
React Flow

A customizable React component for building node-based editors and interactive diagrams

https://reactflow.dev/
https://reactflow.dev/examples
https://github.com/xyflow/xyflow

#react #flowchart
Critical RCE Vulnerabilities in React and Next.js
Severity: 10/10

The important part to know:

- Even if your app does not implement any React Server Function endpoints it may still be vulnerable if your app supports React Server Components.

- The vulnerability is present in versions 19.0, 19.1.0, 19.1.1, and 19.2.0 of: react-server-dom-webpack, react-server-dom-parcel, react-server-dom-turbopack

- Some React frameworks and bundlers depended on, had peer dependencies for, or included the vulnerable React packages. The following React frameworks & bundlers are affected: next, react-router, waku, @parcel/rsc, @vitejs/plugin-rsc, and rwsdk.


- react blog
- github advisory
- vercel blog
- fix-react2shell-next (quick fix repo by vercel)

#rce #react #nextjs #cve