TMiR 2025-12: Year in review, React2Shell (RCE, DOS, SCE, oh my)

We'll be going live in @reactiflux.com around 12:30 ET for December's "This Month in React" ( @tmir.reactiflux.com ), where Carl, Mo, and I will be breaking down the "React2Shell" RSC vulnerability - what happened, why, impact, and more. Also looking at the ecosystem and year in review. Join us!

Researchers have found two new vulnerabilities in React Server Components while attempting to exploit the patches last week. These are new issues, separate from the critical CVE last week. The patch for React2Shell remains effective for the Remote Code Execution exploit.

There is critical vulnerability in React Server Components disclosed as CVE-2025-55182 that impacts React 19 and frameworks that use it. A fix has been published in React versions 19.0.1, 19.1.2, and 19.2.1. We recommend upgrading immediately. react.dev/blog/2025/12...

TMiR 2025-11: Cloudflare outage, ongoing npm hacks, React Router is getting RSCs

Não tem jeito, toda vez que ouço o @tmir.reactiflux.com saio completamente HYPADO

TMiR 2025-10: Post-conf; React 19.2, React Foundation, React Native removing old architecture. Next.js has too many directives

New Era for React = Stronger JavaScript Ecosystem 💙 React doesn’t live in isolation - It works alongside Node.js, Electron, webpack, and more. A dedicated foundation under the Linux Foundation means more collaboration, security, and sustainability across the ecosystem. hubs.la/Q03MylxX0

Day 2 of React Conf! React Native keynotw now

Join the Discord to chat with fellow attendees and submit your questions for speakers to answer on the livestream: discord.gg/reactconf

Watch the livestream at conf.react.dev or YouTube www.youtube.com/watch?v=p9Oc...

Huge positive news for the React community. React and React Native are moving out of Meta and into Linux Foundation. engineering.fb.com/2025/10/07/o...

Loving the announcements in the ReactConf keynote! Great summary of new React features (Activity etc), Compiler 1.0, community acknowledgements, and finally a React Foundation! (also we've covered most of the new features in @tmir.reactiflux.com episodes!)

What's new in React? If you listened to our September episode, you already know what Mofei Zhang is going to tell you 😁

React 19.2 is now available! This release includes Activity, useEffectEvent, React Performance Tracks, partial pre-rendering, and more: react.dev/blog/2025/10...

TMiR 2025-09: React 19.2 on the horizon; npm is still getting compromised

👀 React Native 1.0 is finally on the horizon Announced at React Universe Conf, they will share the plan to reach 1.0 soon! RN recently: - improved its release process (6x/year) - stabilized and clarified its public APIS - introduced workflows to catch breaking changes

Check out August's This Month in React episode, where Carl and I dive into the latest React API design updates, talk about React community devrel and the NX hack, and much more!

TMiR 2025-08: NX compromised; no more throwing promises; Remix-ing new component models

TMiR 2025-07: Vercel shakeups, new React Compiler docs tmir.transistor.fm/s2/7

Dan explains RSC. Remix v3? React core team WIP?

We'll be going live for @tmir.reactiflux.com over in the @reactiflux.com Discord in about 15 minutes! Join @vcarl.com , @mojavad.bsky.social , and myself as we recap and analyze the latest developments in the constantly-evolving React ecosystem!

Join us! discord.gg/NhXcYDNv?eve...

Spring React Jam is complete! 🌷 A huge thank you to everyone who joined us on this creative adventure. Winners will be announced June 10th 🏆 #gamedev #gamejam #reactjs

Been listening to a March episode of @tmir.reactiflux.com, where @acemarke.dev was talking about helping React team deprecate CRA and get Vite into the React docs, but the React team was really reluctant about the latter 😅 Mark shines light on this story, and more importantly he's really funny 😆

This Month in React, April 2025: React Labs gives us some detail on what the core team is prioritizing, and 19.1 helps us debug owner stacks www.reactiflux.com/transcripts/...

We record @tmir.reactiflux.com in ~ 5 minutes! discord.gg/8ENyXHvK?eve...

After 5 years in the making, I'm very happy to finally release Anime.js v4, my dream animation library: 🧩 New modular API ⚡️ Highly performant 🖱️ Scroll-linked animations 🫵 Draggables ↔️ Responsive ✨ Additive animations 🪽 WAAPI support And so much more! Check out the new website animejs.com!

We are Cult.Repo, the original creators behind the iconic Open Source documentaries (VueJS, Kubernetes, GraphQL). Formerly Honeypot, we are now independently owned and community- and sponsor-funded. Follow us on YouTube: www.youtube.com/@cultrepo

This Month in React, March 2025: Next had an auth vulnerability, TypeScript is porting to Golang Next.js had a critical vulnerability in middleware versions 12–15 — and didn't coordinate a patch with other hosting providers; React Native shipped React 19 support; TS is rewriting to Golang

This Week In React 226 Read now! thisweekinreact.com/newsletter/226 ⚛️ - Parcel RSC - TanStack - Astro - React-Scan - React Router 📱 - Worklets - Enterprise Framework - Perf Guide - BackgroundTask - Expo UI

This Month in React, February 2024: Updated new project docs! The core team shipped new docs and a blog post; Sunsetting Create React App. This comes after much back-and-forth about what to do with the project, with the core team generally recommending against SPAs (and de-emphasizing Vite)

TypeScript being rewriten in Go 🤯

📣 Time to announce "create-tsrouter-app" or CTA, a drop-in CRA replacement: - Powered by @vite.dev, TanStack Router, built by @jherr.dev - TypeScript/Tailwind/File-Route templates (more coming) - Full control over Vite and (soon) upgradeable to TanStack Start www.youtube.com/watch?v=10J6...

This Month in React, January 2025: Movement happening on Create React App, is Redwood.js dead? This month, the main subject of conversation was Create React App, and digesting how it's been socially understood to be deprecated for years without ever formally having been marked as such

This Week In React 221 Read and subscribe: thisweekinreact.com/newsletter/221 ⚛️ - State of React - React Router - Rsbuild - ProseMirror - RSC - React Hook Form 📱 - AI + RN - React Strict DOM - Universal RSC - Gesture Handler - macOS - Radon - Polygen - Ignite

Good morning TypeScript friends. In today's episode of @typescript.fm we go over @vite.dev and its ecosystem. How is it for TS development, why it's so popular, gotchas we've run into, and how to get started! Enjoy! 🤘 typescript.fm/4

TMiR 2025-01: Movement on CRA, Redwood.js dead? www.reactiflux.com/transcripts/...

This Month in React, December 2024: React 19 is here 🎉 www.reactiflux.com/transcripts/...

Join us in the Reactiflux stage for December's live recording in 45 minutes! discord.gg/BANDUKFK?eve...

The State of JS 2024 survey results are now live! 2024.stateofjs.com/en-US A couple highlights 🧵

TMiR 2024-11: React 19 is unblocked, Next 15 is 'stable', Expo launch week. The cool kids are on BlueSky 🦋 www.reactiflux.com/transcripts/...

This Month in React, August 2024: Matt Pocock taught us to make modules, RN is faster, iterator helpers are cool, JSR/Deno going sour www.reactiflux.com/transcripts/...

Happiness peaked in 2018! It's all downhill from there 📉 www.reactiflux.com/t...

State of JS breakdown: Vue usage has surpassed Angular, and everyone love Svelte (even if they aren't using it) www.reactiflux.com/t...

2024-07: State of JS, React, HTML reactiflux.com/transcripts/...