Professional / Community 2025.10.7

08 December 2025 at 16:16 UTC

SHA256: {SHA FROM OPTION GOES HERE} MD5: {MD5 FROM OPTION GOES HERE}

This release adds a new scan check for React2Shell (CVE-2025-55182, CVE-2025-66478), and upgrades Burp's browser.

New scan check for React2Shell (CVE-2025-55182, CVE-2025-66478)

We've added a new active scan check for React2Shell, a critical remote code execution vulnerability affecting React Server Components in React and Next.js. This check is enabled by default and runs once per host.

Browser upgrade

We've upgraded Burp's browser to Chromium 143.0.7499.41 for Windows & Mac and 143.0.7499.40 for Linux. For more information, see the Chromium release notes.