A popular JavaScript cryptography library is vulnerable in a way which could allow threat actors to break into user accounts.
CVE-2025-55182, a critical RCE vulnerability in React Server Components, is ringing alarm bells among cyber experts.