The Download: React2Shell Vulnerability, GPT 5.2 in GitHub Copilot, and Open Source News

Hosted by Christina Warren, this GitHub video covers Anthropic’s acquisition of Bun, the transition of MCP to the Linux Foundation, the React2Shell security vulnerability, the arrival of GPT 5.2 in GitHub Copilot, and top open source picks for 2025.

The Download: Bun acquired by Anthropic, React2Shell, GPT 5.2 & more

Hosted by: Christina Warren

Covered Topics:

• Bun Joins Anthropic: Bun, a popular JavaScript runtime, has been acquired by Anthropic. This move highlights Anthropic’s growing engagement with open source tools and wider developer ecosystems. Read more

• Model Context Protocol (MCP) to the Linux Foundation: MCP transitions to open governance under the Linux Foundation, facilitating community collaboration on standards for AI tools and agents. See details on GitHub Blog and Anthropic’s statement.

• React2Shell Vulnerability: A critical vulnerability named React2Shell affects React server components, potentially allowing denial-of-service attacks and source code exposure. Security advisories are available for Next.js and React. Full write-up is accessible at react2shell.com.

• GPT 5.2 in GitHub Copilot: The arrival of OpenAI’s GPT 5.2 model in GitHub Copilot Public Preview brings new capabilities for code completion and AI-assisted development. See the changelog.

• Open Source Picks of 2025: The crew highlights their favorite open source projects:

  • F1 Race Replay
  • Job Seeker Analytics
  • Marmite
  • SummerCart64

Links & Resources

• YouTube Channel
• GitHub Blog
• X (Twitter)
• LinkedIn
• Insider Newsletter
• Instagram
• TikTok

For more weekly developer news and in-depth coverage, follow GitHub’s official channels.