Google Warns of Critical Vulnerability in Widely Used React JavaScript Library

Google has raised an alarm regarding a critical vulnerability, CVE-2025-55182, in the React JavaScript library, which allows unauthorized code execution by attackers. Exploited by state-sponsored groups from China and Iran, as well as cybercriminals, this flaw has been linked to the deployment of malicious backdoors and cryptocurrency miners across over 50 organizations in various sectors. The swift exploitation of this vulnerability, disclosed by React maintainers on December 3, underscores significant cybersecurity risks and the urgent need for healthcare technology professionals to enhance their defenses against such threats. Addressing this issue is crucial for safeguarding sensitive healthcare data and infrastructure from escalating cyberattacks.

Opens on The Register