Highlight from React2Shell: In-the-Wild Exploitation Expected for Critical React Vulnerability
even if their application does not implement any React Server Function endpoints, it could still be vulnerable if React Server Components (RSC) are supported.