React2Shell flaw under active attack exposes thousands of React and Next.js apps to remote code execution, forcing urgent ...