k
keynews.ai
keynews.ai
ToolsThe story, in brief

Automated React2Shell vulnerability patching is now available

Not a pilot. Vercel just automated critical vulnerability patching across React and Next.js projects.

Reporting by Vercel Blog 1 min brief
Paper-cut illustration of a coral software window opening into a three-dimensional drafting space.
New tools for building and creating with AI.AI illustration by KeyNews
The KeyNews take

Why it matters

Vercel's Agent now automatically detects and patches the React2Shell RCE vulnerability (CVE-2025-55182) affecting React 19 and Next.js, generating verified pull requests at no cost. This shifts security vulnerability response from manual to autonomous for the millions of developers on Vercel's platform.

The key facts

6 to know

  1. React2Shell (CVE-2025-55182) is a critical RCE in React Server Components affecting React 19 and Next.js

  2. Vercel Agent automatically detects vulnerable packages and generates pull requests with patched upgrades

  3. Feature includes isolated Sandbox environment execution and verification of updates

  4. Preview links auto-generated with PRs for manual validation

  5. Available at no cost to all Vercel users

  6. Applies to React, Next.js, and related RSC package ecosystems

Go to the source

Vercel Blogvercel.com

Publisher excerpt: Vercel Agent now detects vulnerable packages in your project, and automatically generates pull requests with fixes to upgrade them to .patched versions Powered by Vercel's , these auto-fix upgrades are available at no cost and help teams stay secure with minimal manual effort.self-driving…
Read original report
Back to today's editionMore tools news

The wider picture

View all
Paper-cut illustration of a coral software window opening into a three-dimensional drafting space.
AI illustration by KeyNews
Tools01

Alibaba Open Sources OpenCodeReview for AI-Assisted Code Review

A production-grade code-review tool combining rule-based checks with LLM reasoning — relevant to engineering teams evaluating AI-assisted code quality tooling and considering build vs. buy for review automation.

InfoQ AI/ML
Paper-cut illustration of a coral software window opening into a three-dimensional drafting space.
AI illustration by KeyNews
Tools02

Runway wants to turn AI video generation into a live stream you control in real time

Runway's shift from batch video generation to live-streamed, real-time control changes the interaction model for creative tools and unlocks new applications in robotics and autonomous systems.

The Decoder
Paper-cut illustration of a coral software window opening into a three-dimensional drafting space.
AI illustration by KeyNews
Tools03

Meta’s Muse is creepy, but maybe not for the reasons you think

A widely-deployed AI assistant shipped with a privacy and transparency gap that raises questions about how these tools actually work and what access they grant themselves. Practitioners need to understand what they're actually allowing when they install agent-adjacent products.

The Verge AI