[Update from December 05, 2025]

The Dynatrace team has finished the analysis of the React 19 Server Components vulnerability (CVE-2025-55182). Dynatrace software is not impacted by this vulnerability.

[Update from December 04, 2025]

The Dynatrace team is actively reviewing the recently published React 19 Server Components vulnerability (CVE-2025-55182).

To date, none of the Dynatrace components seem to be affected by this vulnerability. The Dynatrace team will continue to assess the situation and provide further status updates on this page.

Use Dynatrace to detect React2Shell

Curious about how you can use Dynatrace to detect React2Shell in your infrastructure? Read our blog to learn best practices for identifying React2Shell and minimizing risk in your environment: CVE-2025-55182: React2Shell Critical Vulnerability — what it is and what to do

Notice

This document is provided on an “as is” basis, with no express or implied warranties. Some of the information provided may come from third parties. Your use of the information in the document or materials linked from the document is at your own risk. Dynatrace reserves the right to change or update this document without notice at any time. Dynatrace expects to update this document as new information becomes available.

The post React 19 Server Components vulnerability – React2Shell (CVE-2025-55182) appeared first on Dynatrace news.