State of JavaScript 2025調查顯示，TypeScript已成為許多團隊的預設語法，前端建置工具的重心也已由webpack轉向以Vite為核心的工具鏈，AI生成程式碼占比升至29%，並開始影響閱讀文件與架構選擇 掌握 AI ...

A critical vulnerability, CVE-2025-66478, has been identified in Next.js applications using React Server Components (RSC) with the App Router. This vulnerability receives a CVSS score of 10.0 and a ...

A critical security flaw has been disclosed in the Next.js React framework that could be potentially exploited to bypass authorization checks under certain conditions. The vulnerability, tracked as ...

A monthly overview of things you need to know as an architect or aspiring architect. Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with ...

The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report Notable vulnerabilities in Next.js (CVE-2025-29927) and CrushFTP Rapid7 is warning customers of two ...

Editor's note: This blog was updated on Dec. 4, 5, 7, and 12, 2025, with additional guidance on Cloud Armor WAF rule syntax, and WAF enforcement across App Engine Standard, Cloud Functions, and Cloud ...

Following the React2Shell disclosure, increased community research into React Server Components surfaced two additional vulnerabilities that require patching: a high-severity Denial of Service ...

Update: Mon Mar 24th, 11PM UTC: Next.js has made further changes to address a smaller vulnerability introduced in the patches made to its middleware handling. Users should upgrade to Next.js versions ...