Published onDecember 14, 2025Next.js 12 to 15.5.9: Patching CVE-2025-55182 (React2Shell)developmentnextjssecurityThree years of technical debt and a CVSS 10.0 RCE vulnerability being actively exploited in the wild