Welcome to Issue #5! It has been a high-stakes week for the React ecosystem, with security taking center stage. First and foremost: there is a High-Severity Denial of Service (DoS) vulnerability impacting React Server Components (RSC). If you are using Next.js, React Router, or any RSC-based setup, you need to check your versions immediately. We’ve included both the official React advisory and Vercel’s summary to help you patch your apps before the weekend. On the brighter side, we’re looking at the future of AI-driven development. Vercel just dropped a bombshell blog post showing how a simple AGENTS.md file—providing persistent context rather than on-demand "Skills"—can skyrocket an AI agent's accuracy to 100%. We also have a masterclass from Expo on how to keep your users coming back in 2026. Let’s dive into the updates you need to know.

📰 Article

AGENTS.md outperforms skills in our agent evals

Vercel's latest research reveals that a simple 8KB 'AGENTS.md' file in your project root can boost AI coding agent accuracy from 53% to 100%. By removing the 'decision point' required to call tools (Skills), persistent context allows LLMs to follow framework patterns more reliably.

By Jude Gao

react • nextjs

📢 News

Summary of CVE-2026-23864

Vercel has released a critical summary of a high-severity Denial of Service vulnerability (CVSS 7.5) affecting React Server Components. While Vercel has deployed WAF rules to protect hosted projects, they emphasize that these are not a substitute for a framework upgrade. This post outlines the specific Next.js versions that include the fix.

By Vercel Team

react • security

📢 News

Denial of Service Vulnerabilities in React Server Components

The official upstream advisory from the React team regarding the DoS vulnerability in the 'Flight' protocol. Crafted HTTP requests sent to Server Function endpoints can trigger excessive CPU usage and memory exhaustion. This impacts all RSC-enabled environments including Vite, Parcel, and React Router.

react • security

💡 Quick Tip

5 tips to increase mobile app downloads and retention in 2026

Expo shares a comprehensive playbook for mobile growth, focusing on App Store Optimization (ASO), behavioral push notifications, and using Over-the-Air (OTA) updates to quickly fix bugs reported in user reviews to protect your app's rating.

By Dan Kelly

react-native • expo