Critical RCE Vulnerabilities in React and Next.js