Tagged deserialization

React2Shell: Another Day, Another React Vulnerability (CVSS 10.0)

React Server Components gets absolutely demolished by CVE-2025-55182. I demonstrate root RCE because apparently Meta's security team forgot about input validation.