Not entirely true. The bug is *also* in the dev server, but primarily the exploi... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

cluckindan 7 months ago | parent | context | favorite | on: Critical RCE Vulnerabilities in React and Next.js

Not entirely true. The bug is also in the dev server, but primarily the exploitable vulnerability is in apps built for production.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact