React security issue investigation and fixes

[mosabua]

It looks like we are not affected by

https://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components

but I can look into it more and just do preventative PRs anyway.

[mosabua]

And now there is another one .. fun times

https://react.dev/blog/2025/12/11/denial-of-service-and-source-code-exposure-in-react-server-components

[mosabua]

Recorded Manfred mentors 8 - seems all good. Filed some PRs and will do some follow up as well though