Software5 dSeptember 16, 2026, 07:11

React 19.3, the Compiler, and a CVSS 10: What changed while you weren't looking

React Compiler 1.0 automatically memoizes components, a critical vulnerability CVE-2025-55182 with a CVSS score of 10.0 was found in React Server Components allowing remote code execution, and React 19.3 added ViewTransition, Fragment refs and browser(). The project moved under Linux Foundation stewardship.

DEV Community Open source

React 19.3, the Compiler, and a CVSS 10: What changed while you weren't looking

React Compiler 1.0 released October 7, 2025, memoizes components and hooks
CVE-2025-55182 with CVSS 10.0 allowed unauthenticated server code execution
Versions 19.0–19.2.0 affected; fixes in 19.0.1, 19.1.2 and 19.2.1
React 19.3 released September 9, 2026 with ViewTransition and Fragment refs

#React#Meta

Valve open-sources Lepton for running Android games on Linux

Software

Google brings games to Android Auto out of beta

Software

Cloudflare's one-command localhost tunnel goes viral five years later

Software

React 19.3, the Compiler, and a CVSS 10: What changed while you weren't looking

Valve open-sources Lepton for running Android games on Linux

Google brings games to Android Auto out of beta

Cloudflare's one-command localhost tunnel goes viral five years later

Comfy Desktop simplifies running local AI models on PC