The issue, tracked as CVE-2025-55182, was disclosed on December 3 by the React team after being identified by white-hat ...

React vulnerability CVE-2025-55182 exploited by crypto-drainers to execute remote code and steal funds from affected websites ...