The latest articles on DEV Community by Hammad Zahoor (@hammad_zahoor). https://dev.to/hammad_zahoor https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F2769128%2Fadf8198a-8171-414f-8278-f536e7b9988e.jpg https://dev.to/hammad_zahoor en Hammad Zahoor Fri, 05 Dec 2025 15:01:44 +0000 https://dev.to/hammad_zahoor/critical-security-vulnerability-found-in-react-server-components-rsc-b82 https://dev.to/hammad_zahoor/critical-security-vulnerability-found-in-react-server-components-rsc-b82 <p>A significant security flaw has been discovered in React Server Components (RSC), affecting thousands of applications built with React 19 and the Next.js App Router. The issue arises from unsafe deserialization within the RSC “Flight” protocol, which allows attackers to inject malicious payloads, potentially leading to Remote Code Execution (RCE).</p> <h3> Why This Matters </h3> <ul> <li>RSC is fundamental to React’s modern architecture.</li> <li>Many applications utilise RSC without realising the associated backend risks.</li> <li>Even new projects created with <code>create-next-app</code> can be vulnerable.</li> <li>The flaw impacts core RSC packages in React 19.</li> </ul> <h3> What Developers Should Do </h3> <ol> <li>Upgrade React to versions 19.0.1, 19.1.2, or 19.2.1.</li> <li>Update Next.js to the latest patched versions (15/16).</li> <li>Audit and secure any RSC-related server endpoints.</li> <li>Monitor logs for suspicious RSC traffic.</li> </ol> <h3> Final Thoughts </h3> <p>Framework-level vulnerabilities like this highlight the diminishing line between frontend and backend responsibilities. As React continues to evolve, developers must remain vigilant about security.</p> <p>If React or Next.js is part of your technology stack, update immediately and use this as a reminder to prioritise dependency security.</p> react news nextjs security Hammad Zahoor Fri, 05 Dec 2025 12:19:24 +0000 https://dev.to/hammad_zahoor/a-practical-guide-on-building-reusable-react-card-components-using-styled-components-it-covers-3cno https://dev.to/hammad_zahoor/a-practical-guide-on-building-reusable-react-card-components-using-styled-components-it-covers-3cno <div class="ltag__link"> <a href="/hashirkhan" class="ltag__link__link"> <div class="ltag__link__pic"> <img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3556137%2F24c5e2b2-7378-4d04-a37c-cdee8b33eb37.jpg" alt="hashirkhan"> </div> </a> <a href="https://dev.to/hashirkhan/building-reusable-react-card-components-with-styled-components-2kk5" class="ltag__link__link"> <div class="ltag__link__content"> <h2>Building Reusable React Card Components with Styled Components</h2> <h3>Hashir Khan ・ Oct 9</h3> <div class="ltag__link__taglist"> <span class="ltag__link__tag">#programming</span> <span class="ltag__link__tag">#reactcards</span> <span class="ltag__link__tag">#react</span> <span class="ltag__link__tag">#frontend</span> </div> </div> </a> </div> programming reactcards react frontend Hammad Zahoor Mon, 07 Apr 2025 11:08:24 +0000 https://dev.to/hammad_zahoor/first-blog-2mmn https://dev.to/hammad_zahoor/first-blog-2mmn <p>Hi, my name is Hammad Zahoor. This is the first time I am writing a blog for myself. I will post blogs related to my life and my job. Let's see what I can do.</p> firstpost firstblog