The network for creativity
Join 1.25M professional creatives like you
Connect with clients, get discovered, and run your business 100% commission-free
Creatives on Contra have earned over $150M and we are just getting started
Back to feedPost
On November 29th, Lachlan Davidson reported a security vulnerability in React that allows unauthenticated remote code execution by exploiting a flaw in how React decodes payloads sent to React Server Function endpoints.
Even if your app does not implement any React Server Function endpoints it may still be vulnerable if your app supports React Server Components.
This vulnerability was disclosed as CVE-2025-55182 and is rated CVSS 10.0.
The vulnerability is present in versions 19.0, 19.1.0, 19.1.1, and 19.2.0 of:
The network for creativity
Join 1.25M professional creatives like you
Connect with clients, get discovered, and run your business 100% commission-free
Creatives on Contra have earned over $150M and we are just getting started
Trending
Notion
Notion isn’t just where you work, it’s starting to work for you. What agents are you building?
portfolioreview
The best portfolios tell a story, not just show a grid. Share yours for feedback.
brandguidelines
Brand guidelines are becoming living systems, not static documents. What are you building for your clients?
aivideo
AI video tools are moving at warp speed. Which ones are you experimenting with?
freelancerlife
Freelancer life is wins, pivots, and everything in between. What’s yours right now?