wait I'm only using React for SPA (no server rendering) am I also vulnerable????... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		sysguest 29 days ago \| parent \| context \| favorite \| on: RCE Vulnerability in React and Next.js wait I'm only using React for SPA (no server rendering) am I also vulnerable??????

cluckindan 29 days ago | [–]

Only if you are running a vulnerable version of Next.js server.

__jonas 29 days ago | [–]

No, unless you run the React Server Component runtime on your server, which you wouldn't do with a SPA, you would just serve a static bundle.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact