Tech

GMO Cybersecurity Rapidly Updates ASM Tool to Detect Critical React.js ‘React2Shell’ Vulnerability, Strengthening Japan’s Cyber Defenses

GMO Cybersecurity by Ierae Inc., part of the GMO Internet Group, has released an urgent update to its Attack Surface Management (ASM) platform, known as 'GMO Cyber Attack Net de Shindan ASM', to enable detection of a newly disclosed, extremely severe vulnerability in the widely used JavaScript framework React.js, referred to as React2Shell (CVE-2025-55182). The vulnerability, already observed being exploited in real-world attacks, carries a CVSS score of 10.0, the highest possible severity level. This rapid response underscores how critical vulnerability awareness and management have become for software development and enterprise security operations. The updated ASM tool enables organizations to automatically identify whether their externally exposed IT assets are using vulnerable versions of React.js and provides timely notification to accelerate remediation actions. In an era when React.js underpins countless enterprise…