← All frameworks
71
React
modern
javascript · frontend · since 2013
acceptable
↑
1.5 pts
vs last month
Updated October 2026
React scores 72/100. Verdict: Acceptable.
Dimension breakdown
Security
20 total CVEs on record. 2 critical severity.
Total Cves
20
Critical Cves
2
Exploited Cves
0
Avg Cvss
4.5
Cves Last Year
3
Performance
Average performance. Room for optimization.
Ecosystem
235,000 GitHub stars. 1,700 contributors. 12 releases in the last year.
Stars
235,000
Contributors
1,700
Releases Last Year
12
Avg Issue Close Days
15
Ai Readiness
Moderate AI-readiness. Can serve structured data but not optimized for it. Client-side rendering may impede AI consumption.
Structured Output
55
Api First
0.0
Headless Capable
0.0
Developer Experience
Strong developer experience. Good docs, modern tooling, active community.
Market Trajectory
Score
90
Market Share Pct
8.0
Cost Of Ownership
Moderate cost. Requires traditional server infrastructure.
Actively exploited vulnerabilities
Updated 2026-10-11
2 entries
2 confirmed vulnerabilities being actively exploited in real attacks right now. Source: CISA Known Exploited Vulnerabilities.
99% probability of exploitation within 30 days
EPSS score · FIRST.org
Latest entry: 2026-02-05
React scores 72/100 overall. Strongest dimension: market trajectory (90). Weakest: ai readiness (55).
Latest React insights
TinaCMS web component lets a content editor plant scripts in links
October 10, 2026 · 4 min
A researcher says a 900 KB request can stall unpatched React 19.0-19.2 servers
October 9, 2026 · 4 min
JHipster reactive apps let low-privilege users run SQL commands
October 9, 2026 · 4 min
Nuxt 4.6 adds an optional server layer for modules, aimed at easier upgrades
October 6, 2026 · 5 min
Shopify drops React Native, saying AI agents cut the cost of native apps
September 30, 2026 · 4 min
What GPTBot Sees Before Your React App Hydrates: Nothing
July 2, 2026 · 5 min
React Compiler Adds 17% Build Overhead: Rolldown Declines
June 29, 2026 · 4 min
React's Most Influential Voice Moves to Next.js
June 28, 2026 · 4 min
i18next Prototype Pollution: The Translation Layer Nobody Thought to Secure.
June 26, 2026 · 5 min