This Month in React
@tmir.reactiflux.com
How busy professionals stay on top of the React ecosystem. We give you a 1 hour recap of the latest news and nuance in React's development and ecosystem.
https://www.reactiflux.com/tmir
Hosted by Carl Vitullo, Mark Erikson, and Mo Khazali.
https://www.reactiflux.com/tmir
Hosted by Carl Vitullo, Mark Erikson, and Mo Khazali.
TMiR 2025-12: Year in review, React2Shell (RCE, DOS, SCE, oh my)
TMiR 2025-12: Year in review, React2Shell (RCE, DOS, SCE, oh my)
Main ContentReact2Shell vulnerabilityInitial announcementFollowup...
share.transistor.fm
December 31, 2025 at 9:29 PM
TMiR 2025-12: Year in review, React2Shell (RCE, DOS, SCE, oh my)
Reposted by This Month in React
We'll be going live in @reactiflux.com around 12:30 ET for December's "This Month in React" ( @tmir.reactiflux.com ), where Carl, Mo, and I will be breaking down the "React2Shell" RSC vulnerability - what happened, why, impact, and more. Also looking at the ecosystem and year in review.
Join us!
Join us!
December 18, 2025 at 4:18 PM
We'll be going live in @reactiflux.com around 12:30 ET for December's "This Month in React" ( @tmir.reactiflux.com ), where Carl, Mo, and I will be breaking down the "React2Shell" RSC vulnerability - what happened, why, impact, and more. Also looking at the ecosystem and year in review.
Join us!
Join us!
Reposted by This Month in React
Researchers have found two new vulnerabilities in React Server Components while attempting to exploit the patches last week.
These are new issues, separate from the critical CVE last week. The patch for React2Shell remains effective for the Remote Code Execution exploit.
These are new issues, separate from the critical CVE last week. The patch for React2Shell remains effective for the Remote Code Execution exploit.
December 11, 2025 at 8:51 PM
Researchers have found two new vulnerabilities in React Server Components while attempting to exploit the patches last week.
These are new issues, separate from the critical CVE last week. The patch for React2Shell remains effective for the Remote Code Execution exploit.
These are new issues, separate from the critical CVE last week. The patch for React2Shell remains effective for the Remote Code Execution exploit.
A great technical analysis github.com/ejpir/CVE-20...
github.com
December 3, 2025 at 10:47 PM
A great technical analysis github.com/ejpir/CVE-20...
Reposted by This Month in React
There is critical vulnerability in React Server Components disclosed as CVE-2025-55182 that impacts React 19 and frameworks that use it.
A fix has been published in React versions 19.0.1, 19.1.2, and 19.2.1. We recommend upgrading immediately.
react.dev/blog/2025/12...
A fix has been published in React versions 19.0.1, 19.1.2, and 19.2.1. We recommend upgrading immediately.
react.dev/blog/2025/12...
Critical Security Vulnerability in React Server Components ā React
The library for web and native user interfaces
react.dev
December 3, 2025 at 3:45 PM
There is critical vulnerability in React Server Components disclosed as CVE-2025-55182 that impacts React 19 and frameworks that use it.
A fix has been published in React versions 19.0.1, 19.1.2, and 19.2.1. We recommend upgrading immediately.
react.dev/blog/2025/12...
A fix has been published in React versions 19.0.1, 19.1.2, and 19.2.1. We recommend upgrading immediately.
react.dev/blog/2025/12...
TMiR 2025-11: Cloudflare outage, ongoing npm hacks, React Router is getting RSCs
TMiR 2025-11: Cloudflare outage, ongoing npm hacks, React Router is getting RSCs
Transcript and show notesTMiR on Bluesky[00:13] Intro[01:00] New...
share.transistor.fm
December 1, 2025 at 10:34 PM
TMiR 2025-11: Cloudflare outage, ongoing npm hacks, React Router is getting RSCs
TMiR 2025-10: Post-conf; React 19.2, React Foundation, React Native removing old architecture. Next.js has too many directives
TMiR 2025-10: Post-conf; React 19.2, React Foundation, React Native removing old architecture. Next.js has too many directives
Transcript and article links[00:00:00] Intro[00:00:46] New...
share.transistor.fm
October 31, 2025 at 6:59 PM
TMiR 2025-10: Post-conf; React 19.2, React Foundation, React Native removing old architecture. Next.js has too many directives
Reposted by This Month in React
New Era for React = Stronger JavaScript Ecosystem š
React doesnāt live in isolation - It works alongside Node.js, Electron, webpack, and more. A dedicated foundation under the Linux Foundation means more collaboration, security, and sustainability across the ecosystem.
hubs.la/Q03MylxX0
React doesnāt live in isolation - It works alongside Node.js, Electron, webpack, and more. A dedicated foundation under the Linux Foundation means more collaboration, security, and sustainability across the ecosystem.
hubs.la/Q03MylxX0
Celebrating the Launch of the React Foundation | OpenJS Foundation
A New Era for React, and a Stronger JavaScript Ecosystem
hubs.la
October 7, 2025 at 6:41 PM
New Era for React = Stronger JavaScript Ecosystem š
React doesnāt live in isolation - It works alongside Node.js, Electron, webpack, and more. A dedicated foundation under the Linux Foundation means more collaboration, security, and sustainability across the ecosystem.
hubs.la/Q03MylxX0
React doesnāt live in isolation - It works alongside Node.js, Electron, webpack, and more. A dedicated foundation under the Linux Foundation means more collaboration, security, and sustainability across the ecosystem.
hubs.la/Q03MylxX0
How to enable Hermes v1: reactnative.dev/blog/2025/10...
October 8, 2025 at 5:30 PM
How to enable Hermes v1: reactnative.dev/blog/2025/10...
Building off "static Hermes", avg improvement of 60% over current Hermes. Tested in the wild with Expensify, on high- and low-end devices
October 8, 2025 at 5:29 PM
Building off "static Hermes", avg improvement of 60% over current Hermes. Tested in the wild with Expensify, on high- and low-end devices
New architecture shipped as default 1 year ago, October 2024. Stopped supporting old architecture in May 2025. Today, from 0.82, they're removing the old architecture completely!
October 8, 2025 at 5:21 PM
New architecture shipped as default 1 year ago, October 2024. Stopped supporting old architecture in May 2025. Today, from 0.82, they're removing the old architecture completely!
"new architecture started in 2018" when's the last time you shipped something you worked on for > 5 years
October 8, 2025 at 5:20 PM
"new architecture started in 2018" when's the last time you shipped something you worked on for > 5 years
Aha: DevTools are 0.83, planned for later this year. With the recent release cadence, I tend to believe them. DOM APIs are still pretty big, if they dropped all of this today at once I'd be a bit shocked
October 8, 2025 at 5:20 PM
Aha: DevTools are 0.83, planned for later this year. With the recent release cadence, I tend to believe them. DOM APIs are still pretty big, if they dropped all of this today at once I'd be a bit shocked
Y'all this is not a drill, there is a network panel!!! Genuine web parity tbh
October 8, 2025 at 5:17 PM
Y'all this is not a drill, there is a network panel!!! Genuine web parity tbh
"investing in performance" yada yada. Traces and flamegraphs are massive tho
October 8, 2025 at 5:16 PM
"investing in performance" yada yada. Traces and flamegraphs are massive tho
Talk about DevTools. Perf panel!!!
October 8, 2025 at 5:14 PM
Talk about DevTools. Perf panel!!!
This is the real keynote tbh. This is officially React Native Conf
October 8, 2025 at 5:12 PM
This is the real keynote tbh. This is officially React Native Conf
Web performance APIs too???
October 8, 2025 at 5:11 PM
Web performance APIs too???
New docs! reactnative.dev/docs/element...
October 8, 2025 at 5:10 PM
New docs! reactnative.dev/docs/element...
We talked about this last August! Cool! www.reactiflux.com/transcripts/...
This Month in React, August 2024: Matt Pocock taught us to make modules, RN is faster, iterator helpers are cool, JSR/Deno going sour
This Month in React, August 2024: Matt Pocock taught us to make modules, RN is faster, iterator helpers are cool, JSR/Deno going sour | Q&A from 2024-08-27
Join Carl Vitullo, Mark Erikson, and Mo Kha...
www.reactiflux.com
October 8, 2025 at 5:10 PM
We talked about this last August! Cool! www.reactiflux.com/transcripts/...
Web APIs new in 0.82???
October 8, 2025 at 5:07 PM
Web APIs new in 0.82???
"React Native is moving from being inspired by the web, to being aligned with it"
October 8, 2025 at 5:05 PM
"React Native is moving from being inspired by the web, to being aligned with it"