We’re aware of a React RCE (ie #react2shell ) POC circulating that appears to be viable.
Fastly's teams verified our NGWAF successfully blocks this exploit variant.
⚠️ Our initial data points suggest attackers are actively probing for vulnerable applications. ⚠️
Your top priority should remain identifying and updating your React & Next.js apps, along with layering proactive protection.