CVE-2025-55182

LLM-synthesized narrative grounded in this CVE's description and references.

Versions sourced from the GitHub Security Advisory.

• Facebook/React4 versions

  cpe:2.3:a:facebook:react:19.0.0:*:*:*:*:*:*:*+ 3 more

  • cpe:2.3:a:facebook:react:19.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:facebook:react:19.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:facebook:react:19.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:facebook:react:19.2.0:*:*:*:*:*:*:*
• Vercel/Next.js72 versions

  cpe:2.3:a:vercel:next.js:*:*:*:*:*:node.js:*:*+ 71 more

  • cpe:2.3:a:vercel:next.js:*:*:*:*:*:node.js:*:*range: >=15.0.0,<15.0.5
  • cpe:2.3:a:vercel:next.js:14.3.0:canary77:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:14.3.0:canary78:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:14.3.0:canary79:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:14.3.0:canary80:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:14.3.0:canary81:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:14.3.0:canary82:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:14.3.0:canary83:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:14.3.0:canary84:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:14.3.0:canary85:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:14.3.0:canary86:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:14.3.0:canary87:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:-:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary0:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary10:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary11:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary12:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary13:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary14:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary15:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary16:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary17:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary18:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary19:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary1:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary20:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary21:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary22:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary23:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary24:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary25:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary26:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary27:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary28:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary29:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary2:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary30:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary31:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary32:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary33:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary34:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary35:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary36:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary37:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary38:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary39:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary3:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary40:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary41:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary42:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary43:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary44:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary45:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary46:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary47:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary48:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary49:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary4:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary50:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary51:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary52:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary53:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary54:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary55:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary56:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary57:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary5:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary6:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary7:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary8:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:15.6.0:canary9:*:*:*:node.js:*:*
  • cpe:2.3:a:vercel:next.js:16.0.0:-:*:*:*:node.js:*:*
• ghsa-coords3 versions

  pkg:npm/react-server-dom-parcelpkg:npm/react-server-dom-turbopackpkg:npm/react-server-dom-webpack

  >= 19.0.0, < 19.0.1+ 2 more

  • (no CPE)range: >= 19.0.0, < 19.0.1
  • (no CPE)range: >= 19.0.0, < 19.0.1
  • (no CPE)range: >= 19.0.0, < 19.0.1
• Meta/react-server-dom-parcelv5

  Range: 19.0.0
• Meta/react-server-dom-turbopackv5

  Range: 19.0.0
• Meta/react-server-dom-webpackv5

  Range: 19.0.0

• www.openwall.com/lists/oss-security/2025/12/03/4nvdMailing ListPatchThird Party AdvisoryWEB
• react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-componentsnvdPatchVendor AdvisoryWEB
• aws.amazon.com/blogs/security/china-nexus-cyber-threat-groups-rapidly-exploit-react2shell-vulnerability-cve-2025-55182/nvdThird Party Advisory
• github.com/advisories/GHSA-fv66-9v8q-g76rghsaADVISORY
• nvd.nist.gov/vuln/detail/CVE-2025-55182ghsaADVISORY
• www.facebook.com/security/advisories/cve-2025-55182nvdVendor AdvisoryWEB
• github.com/facebook/react/commit/7dc903cd29dac55efb4424853fd0442fef3a8700ghsaWEB
• github.com/facebook/react/pull/35277ghsaWEB
• github.com/facebook/react/releases/tag/v19.0.1ghsaWEB
• github.com/facebook/react/releases/tag/v19.1.2ghsaWEB
• github.com/facebook/react/releases/tag/v19.2.1ghsaWEB
• github.com/facebook/react/security/advisories/GHSA-fv66-9v8q-g76rghsaWEB
• news.ycombinator.com/itemnvdIssue TrackingWEB
• www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource

• New Dysphoria DDoS botnet spreads to 200k devices worldwide
  BleepingComputer · Jul 27, 2026
• No Manners Here: The Ruthless Rise of The Gentlemen Ransomware
  Unit 42 · Jul 10, 2026
• FBI Warns TeamPCP Hackers Compromise Developer Tools in Large-Scale Supply Chain Attacks
  Cyber Security News · Jul 3, 2026
• New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos
  The Hacker News · Jul 2, 2026
• ChocoPoc malware delivered via trojanized exploits on GitHub
  BleepingComputer · Jul 1, 2026
• New ChocoPoC malware targets researchers via trojanized PoC exploits
  BleepingComputer · Jul 1, 2026
• New SharkLoader Malware Deploys Cobalt Strike in StrikeShark Cyberattacks
  The Hacker News · Jun 26, 2026
• StrikeShark: investigating a new campaign delivering Cobalt Strike through SharkLoader
  Securelist · Jun 24, 2026
• AWS Warns Outbound Traffic Blind Spots Can Enable Cloud Data Exfiltration
  Cyber Security News · Jun 23, 2026
• What’s in the container? Analyzing vulnerabilities, risks and protection with Kaspersky Container Security and the KIRA AI assistant
  Securelist · May 29, 2026
• AI Threat Landscape Digest March-April 2026
  Check Point Research · May 26, 2026
• Pentest Agent Suite – Bug Bounty Framework for Claude Code and 6 AI Coding Tools
  Cyber Security News · May 25, 2026
• AI shrinks vulnerability exploitation window to hours
  Help Net Security · May 18, 2026
• Flash Alert: EtherRat and TukTuk C2 End in The Gentleman Ransomware
  TheDFIRReport · May 11, 2026
• ‘PCPJack’ Worm Removes TeamPCP Infections, Steals Credentials
  SecurityWeek · May 8, 2026
• New PCPJack worm steals credentials, cleans TeamPCP infections
  BleepingComputer · May 7, 2026
• PCPJack Credential Stealer Exploits 5 CVEs to Spread Worm-Like Across Cloud Systems
  The Hacker News · May 7, 2026
• China-Linked Hackers Target Asian Governments, NATO State, Journalists, and Activists
  The Hacker News · May 1, 2026
• What type of 'C2 on a sleep cycle' do they leave behind? Novel Chinese spy group found in critical networks in Poland, Asia
  The Register Security · Apr 30, 2026
• Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia
  Trend Micro Research · Apr 30, 2026
• 27th April – Threat Intelligence Report
  Check Point Research · Apr 27, 2026
• Bissa Scanner Exposed: AI-Assisted Mass Exploitation and Credential Harvesting
  TheDFIRReport · Apr 22, 2026
• Cloud Attackers Now Prefer Vulnerability Exploits Over Credentials, Google Cloud Finds
  Infosecurity Magazine · Mar 10, 2026
• Introducing ÆSIR: Finding Zero-Day Vulnerabilities at the Speed of AI
  Trend Micro Research · Jan 15, 2026
• Risky Business #818 -- React2Shell is a fun one
  Risky Business · Dec 10, 2025
• CVE-2025-55182: React2Shell Analysis, Proof-of-Concept Chaos, and In-the-Wild Exploitation
  Trend Micro Research · Dec 10, 2025
• Critical React Server Components Vulnerability CVE-2025-55182: What Security Teams Need to Know
  Trend Micro Research · Dec 5, 2025