Critical Security Vulnerability in React Server Components (CERT-EU Security Advisory 2025-041) On December 3, 2025, the React Team publicly disclosed a critical security vulnerability affecting React Server Components (RSC) and related packages. The vulnerability allows for unauthenticated remote code execution (RCE) via maliciously crafted HTTP requests. It is recommended to update all affected component packages and any frameworks that integrate them. https://www.cert.europa.eu/publications/security-advisories/2025-041/