reactguard

ReactGuard

Scanner React2Shell basato su Xint.

ReactGuard fornisce strumenti di rilevamento di framework e vulnerabilità per CVE-2025-55182 (React2Shell) in framework che supportano React Server Components. Include anche rilevatori per CVE-2025-55183, CVE-2025-55184 e CVE-2025-67779.

Stato del supporto

• Next.js 14-16 e Waku 0.17-0.27: copertura primaria e validata.
• Expo server actions, React Router server actions e RSC generici: disponibili ma sperimentali.

Installazione

pip install git+https://github.com/theori-io/reactguard.git

CLI

reactguard http://host:port/              # Framework + vulnerability detection in one step

# Options
--json                    # emit machine-readable JSON
--ignore-ssl-errors       # skip TLS verification

API Python

from reactguard import ReactGuard

with ReactGuard() as rg:
    scan = rg.scan("https://xint.io/")
    print(scan)