10.0 CVE on React and it's literally just object prototype pollution that can be used for RCE, what are we doing man
not even anything notable, I'm really surprised it hadn't gotten caught much earlier. like sure RSC doesn't have Facebook's oversight (some of the React team members wouldn't have moved to Vercel otherwise) but come on man why aren't there more people scrutinizing the wire format