10 matches found
CLSA-2026-1778114660 TuxCare security update for @react-native-community (1 CVE)
TuxCare rebuilt 11 @react-native-community packages to address 1 CVE. Fixed in 13.6.9-tuxcare.1...
CLSA-2026-1778114659 TuxCare security update for @react-native-community (1 CVE)
TuxCare rebuilt 11 @react-native-community packages to address 1 CVE. Fixed in 12.3.7-tuxcare.1...
CLSA-2026-1777941835 TuxCare security update for @react-native-community (1 CVE)
TuxCare rebuilt 11 @react-native-community packages to address 1 CVE. Fixed in 11.4.1-tuxcare.1...
CLSA-2026-1778114661 TuxCare security update for @react-native-community (1 CVE)
TuxCare rebuilt 13 @react-native-community packages to address 1 CVE. Fixed in 15.1.3-tuxcare.1...
CVE-2025-11953
The Metro Development Server, which is opened by the React Native Community CLI, binds to external interfaces by default. The server exposes an endpoint that is vulnerable to OS command injection. This allows unauthenticated network attackers to send a POST request to the server and run arbitrary...
@react-native-community/cli (>=19.0.0-alpha.0, <=19.1.1) potentially affected by CVE-2025-11953 via @react-native-community/cli-server-api (>=19.0.0, <=19.1.1)
@react-native-community/cli-server-api NPM version =19.0.0, =19.0.0-alpha.0, =19.1.1 Source cves: CVE-2025-11953 Source advisory: SNYK:JS-REACTNATIVECOMMUNITYCLISERVERAPI-13836141...
@react-native-community/cli (18.0.0) potentially affected by CVE-2025-11953 via @react-native-community/cli-server-api (18.0.0)
@react-native-community/cli-server-api NPM version 18.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @react-native-community/cli-server-api and may be impacted: - @react-native-community/cli 18.0.0 Source cves: CVE-2025-11953 Source advisory:...
@fluentui-react-native/tester (>=0.170.52, <=0.170.54), @fluentui-react-native/tester-win32-81 (>=0.38.69, <=0.38.70) +3 more potentially affected by CVE-2025-11953 via @react-native-community/cli-server-api (17.0.0)
@react-native-community/cli-server-api NPM version 17.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @react-native-community/cli-server-api and may be impacted: - @fluentui-react-native/tester =0.170.52, =0.38.69, =0.81.4, =0.81.5, =0.81.32 Source...
