Skip to content

Comment on Ask HN: Who else got pwned by the Next.js RCE?parent

Comments

All platforms can be exploited I gues

React did not have this kind of security vulnerability in 10 years. The Vercel/NextJS/RSC rugpull is responsible for that and the people that made those changes should be named. The lack of shared governance is abysmal.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.