Critical RSC flaws in React and Next.js enable unauthenticated remote code execution; users should update to patched versions ...
A critical vulnerability has been discovered in React Server Components and frameworks like Next.js, allowing an unauthenticated external attacker to run arbitrary code.