HeyJaredDurgesh Pawar
- Indexed articles, last 90 days
- 2
- Latest publication
- Jul 21, 2026
- Outlet visibility, for Smashing Magazine
- Top 1M sites
- Earliest in this view
- Jul 21, 2026
Latest articles
Weaponizing And Defending The React Flight Protocol: Deserialization Sinks In RSCs — Smashing Magazine (opens the original)
Read excerpt
Durgesh Rajubhai Pawar is a freelance developer dedicated to building high-performance, accessible web applications. He specializes in orchestrating complex … More about Durgesh ↬ Weekly tips on front-end & UX.Trusted by 182,000+ folks. React Server Components don’t send HTML to your browser. They don’t send JSON either. When a server component renders, what actually travels over the wire is a custom streaming protocol called Flight. It’s a line-delimited format with its own type system, its own
Weaponizing And Defending The React Flight Protocol: Deserialization Sinks In RSCs (opens the original)
Read excerpt
While React Server Components rely on the custom Flight protocol to stream interactive UIs, this same mechanism introduces powerful deserialization sinks that attackers can exploit. Durgesh Pawar breaks down the mechanics behind the CVSS 10.0 “React2Shell” vulnerability to show how protocol manipulation can lead to remote code execution.
Publishing over time
Last 90 days. Choose a month to open its work.
Recurring subjects
Named in the text we hold. One piece can cover several.
Audience
Top 1M sites
For Smashing Magazine, the outlet · Measured Aug 1, 2026
Website popularity band, not a count of readers or article views.
About this data
Counts cover the work we have indexed. Tone needs enough text and a confident classification. Excerpts and episode notes are not full articles or transcripts.
Identity or attribution wrong? Suggest a correction.