More React CVEs Found! - Threat Wire

Quick Overview

The video reports that three new high-severity and medium-severity CVEs were discovered in React Server Components, potentially allowing for Denial of Service or Source Code Exposure, and that Apple released emergency updates to patch two zero-day CVEs affecting WebKit, while Australia confirmed GitHub is not subject to its age-restricted social media ban, and Denmark proposed banning VPNs to curb internet piracy.

Key Points: Three new vulnerabilities (CVE-2025-55184, CVE-2025-67779, and CVE-2025-55183) were disclosed in React Server Components, including a high-severity Denial of Service (CVSS 7.5) and a medium-severity Source Code Exposure (CVSS 5.3). The high-severity DoS vulnerability involves a malicious HTTP request causing an infinite loop, while the Source Code Exposure vulnerability can return source code if an attacker sends a malicious request to a vulnerable Server Function endpoint. Apple released emergency updates to patch two zero-day CVEs (CVE-2025-4439 and CVE-2025-41474) affecting WebKit, which were actively being exploited in the wild. Australia's eSafety Commissioner confirmed that GitHub will not be subject to the new age-restricted social media ban, which goes into effect on December 10, 2025. The notorious hacking forum BreachForums reappeared via an email sent from an official French Ministry of the Interior domain, though some suspect it might be a honeypot or a failed law enforcement operation. Denmark proposed new legislation to ban the use of VPNs to prevent internet piracy, which critics warn could chill internet freedom. The host recommends checking out a video from the 'Not General Knowledge' YouTube channel regarding streaming piracy and the history of piracy.

Context: This episode of Threat Wire, hosted by Allie Diamond, covers several recent developments in cybersecurity and internet regulation. The segment addresses newly disclosed vulnerabilities in the popular React framework, ongoing efforts by governments to regulate online content access (like Denmark's VPN ban proposal), and regulatory clarity regarding social media age restrictions in Australia. The host also discusses the suspicious reappearance of the dark web forum BreachForums.