17296 matches found
CVE-2025-11953 Command injection in React Native Community CLI allows remote attackers to perform remote code execution by sending HTTP requests
The Metro Development Server, which is opened by the React Native Community CLI, binds to external interfaces by default. The server exposes an endpoint that is vulnerable to OS command injection. This allows unauthenticated network attackers to send a POST request to the server and run arbitrary...
@react-native-community/cli (18.0.0) potentially affected by CVE-2025-11953 via @react-native-community/cli-server-api (18.0.0)
@react-native-community/cli-server-api NPM version 18.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @react-native-community/cli-server-api and may be impacted: - @react-native-community/cli 18.0.0 Source cves: CVE-2025-11953 Source advisory:...
React Native Community CLI security vulnerability
React Native Community CLI is an open source command line tool for React Native Community. A security vulnerability exists in the React Native Community CLI, which stems from a default binding to an external interface and an OS command injection vulnerability in the endpoint, which could allow an...
CVE-2025-11953: Improper Neutralization of Special Elements used in an OS Command
The Metro Development Server, which is opened by the React Native Community CLI, binds to external interfaces by default. The server exposes an endpoint that is vulnerable to OS command injection. This allows unauthenticated network attackers to send a POST request to the server and run arbitrary...
CVE-2025-47912 vulnerabilities
Vulnerabilities for packages: dask-gateway, cargobump, sigstore-scaffolding, conjur-cli, rekor, hivemind, k6, kapp, secrets-store-csi-driver, vault-k8s, xcover, falcosidekick, vault-secrets-webhook, aws-signer-notation-plugin, container-object-storage-interface, sonobuoy, fscrypt, capslock,...
CVE-2025-58186 vulnerabilities
Vulnerabilities for packages: dask-gateway, cargobump, sigstore-scaffolding, conjur-cli, rekor, hivemind, k6, kapp, secrets-store-csi-driver, vault-k8s, xcover, falcosidekick, vault-secrets-webhook, aws-signer-notation-plugin, container-object-storage-interface, sonobuoy, fscrypt, capslock,...
CVE-2025-61723 vulnerabilities
Vulnerabilities for packages: dask-gateway, cargobump, sigstore-scaffolding, conjur-cli, rekor, hivemind, k6, kapp, secrets-store-csi-driver, vault-k8s, xcover, falcosidekick, vault-secrets-webhook, aws-signer-notation-plugin, container-object-storage-interface, sonobuoy, fscrypt, capslock,...
CVE-2025-58188 vulnerabilities
Vulnerabilities for packages: dask-gateway, cargobump, sigstore-scaffolding, conjur-cli, rekor, hivemind, k6, kapp, secrets-store-csi-driver, vault-k8s, xcover, falcosidekick, vault-secrets-webhook, aws-signer-notation-plugin, container-object-storage-interface, sonobuoy, fscrypt, capslock,...
GHSA-447V-2QG4-H8HC vulnerabilities
Vulnerabilities for packages: dask-gateway, cargobump, sigstore-scaffolding, conjur-cli, rekor, hivemind, k6, kapp, secrets-store-csi-driver, vault-k8s, xcover, falcosidekick, vault-secrets-webhook, aws-signer-notation-plugin, container-object-storage-interface, sonobuoy, fscrypt, capslock,...
CVE-2025-58185 vulnerabilities
Vulnerabilities for packages: dask-gateway, cargobump, sigstore-scaffolding, conjur-cli, rekor, hivemind, k6, kapp, secrets-store-csi-driver, vault-k8s, xcover, falcosidekick, vault-secrets-webhook, aws-signer-notation-plugin, container-object-storage-interface, sonobuoy, fscrypt, capslock,...
GHSA-9GCR-GP5F-JW27 vulnerabilities
Vulnerabilities for packages: dask-gateway, cargobump, sigstore-scaffolding, conjur-cli, rekor, hivemind, k6, kapp, secrets-store-csi-driver, vault-k8s, xcover, falcosidekick, vault-secrets-webhook, aws-signer-notation-plugin, container-object-storage-interface, sonobuoy, fscrypt, capslock,...
GHSA-FRHW-MQJ2-WXW2 vulnerabilities
Vulnerabilities for packages: secrets-store-csi-driver, container-object-storage-interface, fscrypt, aws-s3-controller, flyte, ctop, mongodb-kubernetes-operator, protoc-gen-go-grpc, docker-cli-buildx, cri-tools, grafana-agent-operator, whereabouts, secrets-store-csi-driver-provider-aws,...
GHSA-CXQ7-XW9V-RCV3 vulnerabilities
Vulnerabilities for packages: dask-gateway, cargobump, sigstore-scaffolding, conjur-cli, rekor, hivemind, k6, kapp, secrets-store-csi-driver, vault-k8s, xcover, falcosidekick, vault-secrets-webhook, aws-signer-notation-plugin, container-object-storage-interface, sonobuoy, fscrypt, capslock,...
GHSA-JWMF-CHVC-RF92 vulnerabilities
Vulnerabilities for packages: dask-gateway, cargobump, sigstore-scaffolding, conjur-cli, rekor, hivemind, k6, kapp, secrets-store-csi-driver, vault-k8s, xcover, falcosidekick, vault-secrets-webhook, aws-signer-notation-plugin, container-object-storage-interface, sonobuoy, fscrypt, capslock,...
GHSA-QH38-484V-W52X vulnerabilities
Vulnerabilities for packages: dask-gateway, cargobump, sigstore-scaffolding, conjur-cli, rekor, hivemind, k6, kapp, secrets-store-csi-driver, vault-k8s, xcover, falcosidekick, vault-secrets-webhook, aws-signer-notation-plugin, container-object-storage-interface, sonobuoy, fscrypt, capslock,...
GHSA-HJX7-FPXX-MJ48 vulnerabilities
Vulnerabilities for packages: dask-gateway, cargobump, sigstore-scaffolding, conjur-cli, rekor, hivemind, k6, kapp, secrets-store-csi-driver, vault-k8s, xcover, falcosidekick, vault-secrets-webhook, aws-signer-notation-plugin, container-object-storage-interface, sonobuoy, fscrypt, capslock,...
GHSA-WCW9-47FP-RRFR vulnerabilities
Vulnerabilities for packages: dask-gateway, cargobump, sigstore-scaffolding, conjur-cli, rekor, hivemind, k6, kapp, secrets-store-csi-driver, vault-k8s, xcover, falcosidekick, vault-secrets-webhook, aws-signer-notation-plugin, container-object-storage-interface, sonobuoy, fscrypt, capslock,...
GHSA-RJCG-56PH-3QVG vulnerabilities
Vulnerabilities for packages: dask-gateway, cargobump, sigstore-scaffolding, conjur-cli, rekor, hivemind, k6, kapp, secrets-store-csi-driver, vault-k8s, xcover, falcosidekick, vault-secrets-webhook, aws-signer-notation-plugin, container-object-storage-interface, sonobuoy, fscrypt, capslock,...
CVE-2025-58188 vulnerabilities
Vulnerabilities for packages: azure-ipam, rancher-system-agent, pushprox, shfmt, trivy-operator-fips, flyte, flannel-fips, php-fpmexporter, dask-gateway, gcp-compute-persistent-disk-csi-driver, authservice-fips, kubescape-operator-fips, grpcurl-fips, crane, opensearch-k8s-operator, k6-fips,...
CVE-2025-58189 vulnerabilities
Vulnerabilities for packages: azure-ipam, rancher-system-agent, pushprox, shfmt, trivy-operator-fips, flyte, flannel-fips, php-fpmexporter, dask-gateway, gcp-compute-persistent-disk-csi-driver, authservice-fips, kubescape-operator-fips, grpcurl-fips, crane, opensearch-k8s-operator, k6-fips,...