# \[CVE-2025-55182\] React vulnerabilty

**URL:** <https://forum.inductiveautomation.com/t/cve-2025-55182-react-vulnerabilty/112621>\
**Category:** Ignition\
**Tags:** perspective\
**Created:** [December 4, 2025, 4:37pm UTC](https://forum.inductiveautomation.com/t/cve-2025-55182-react-vulnerabilty/112621 "2025-12-04T16:37:49Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![justin.brzozoski](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/justin.brzozoski/32/13452_2.png) [@justin.brzozoski](https://forum.inductiveautomation.com/u/justin.brzozoski)\
**Post date:** [December 4, 2025, 4:37pm UTC](https://forum.inductiveautomation.com/t/cve-2025-55182-react-vulnerabilty/112621/1 "2025-12-04T16:37:49Z")

</div>

> **[Admins and defenders gird themselves against maximum-severity server vuln](https://arstechnica.com/security/2025/12/admins-and-defenders-gird-themselves-against-maximum-severity-server-vulnerability/)**
>
> Open source React executes malicious code with malformed HTML—no authentication needed.

Can someone from IA give some comment whether Perspective is affected by this?

---

<div class="post-metadata">

**Author:** ![paul-griffith](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/paul-griffith/32/37249_2.png) [@paul-griffith](https://forum.inductiveautomation.com/u/paul-griffith)\
**Post date:** [December 4, 2025, 4:38pm UTC](https://forum.inductiveautomation.com/t/cve-2025-55182-react-vulnerabilty/112621/2 "2025-12-04T16:38:13Z")

</div>

Not affected.

EDIT: [https://security.inductiveautomation.com/?tcuUid=501c5f8d-ff60-4500-ad47-6971aac46cd8](https://security.inductiveautomation.com/?tcuUid=501c5f8d-ff60-4500-ad47-6971aac46cd8)

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [December 4, 2025, 5:00pm UTC](https://forum.inductiveautomation.com/t/cve-2025-55182-react-vulnerabilty/112621/3 "2025-12-04T17:00:20Z")

</div>

I am always happy to point clients at IA's history of security transparency and rapid remediation (however rarely needed). Kudos to IA.

😃 👍