Skip to content

v1.0.9

Marketplace
Marketplace

Choose a tag to compare

View all tags
@alokemajumder alokemajumder released this 06 Dec 07:37
· 7 commits to main since this release
v1.0.9
5aa564b

Fixes

Improved URL scanner to correctly detect vulnerable Next.js applications:

  • Version detection: Now checks page source for vulnerable Next.js/React version strings
  • HTML entity handling: Properly handles " encoded quotes in version strings
  • Multi-endpoint probing: Scans multiple common Server Action endpoints
  • Enhanced patterns: Added RSC Flight protocol patterns for better detection

Verified

Tested against known vulnerable target: https://nextjs-cve-hackerone.vercel.app/

$ npx react2shell-guard@1.0.9 scan-url https://nextjs-cve-hackerone.vercel.app/

VULNERABLE
  URL: https://nextjs-cve-hackerone.vercel.app/
  Status: 200
  Signature: version-detection: "next": "16.0.6"

Installation

npm install -g react2shell-guard@1.0.9
Assets 2
Loading