It's so bad that it has a maximum severity rating on the CVE database. Fortunately, React's developers created a fix almost ...