A maximum severity vulnerability, dubbed 'React2Shell', in the React Server Components (RSC) 'Flight' protocol allows remote code execution without authentication in React and Next.js applications.

Could 2026 be the year of the beautiful back end? We explore the range of options for server-side JavaScript development, from Express to Next and all the rest. A grumpy Scrooge of a developer might ...