React Native Community CLI - Unauthenticated OS Command Injection

The Metro development server started by the React Native Community CLI binds to external network interfaces by default and exposes an unauthenticated /open-url endpoint. Affected versions pass the attacker supplied url value straight to the open helper without validating the scheme, allowing an...

CLSA-2026-1792595229 TuxCare security update for @react-native-community/cli-platform-android (1 CVE)

TuxCare rebuilt @react-native-community/cli-platform-android to address 1 CVE. Fixed in 13.5.1-tuxcare.1...

CLSA-2026-1792256009 TuxCare security update for @react-native-community/cli-server-api (1 CVE)

TuxCare rebuilt @react-native-community/cli-server-api to address 1 CVE. Fixed in 13.6.9-tuxcare.3...

CLSA-2026-1792256007 TuxCare security update for @react-native-community/cli-server-api (1 CVE)

TuxCare rebuilt @react-native-community/cli-server-api to address 1 CVE. Fixed in 13.6.8-tuxcare.1...

CLSA-2026-1792256008 TuxCare security update for @react-native-community/cli-server-api (1 CVE)

TuxCare rebuilt @react-native-community/cli-server-api to address 1 CVE. Fixed in 13.5.1-tuxcare.1...

CLSA-2026-1792256005 TuxCare security update for @react-native-community/cli-server-api (1 CVE)

TuxCare rebuilt @react-native-community/cli-server-api to address 1 CVE. Fixed in 12.0.0-alpha.15-tuxcare.1...

CLSA-2026-1792256004 TuxCare security update for @react-native-community/cli-server-api (1 CVE)

TuxCare rebuilt @react-native-community/cli-server-api to address 1 CVE. Fixed in 12.0.0-alpha.17-tuxcare.1...

CLSA-2026-1792256003 TuxCare security update for @react-native-community/cli-server-api (1 CVE)

TuxCare rebuilt @react-native-community/cli-server-api to address 1 CVE. Fixed in 12.3.6-tuxcare.1...

CLSA-2026-1792256002 TuxCare security update for @react-native-community/cli-server-api (1 CVE)

TuxCare rebuilt @react-native-community/cli-server-api to address 1 CVE. Fixed in 12.3.2-tuxcare.1...

CLSA-2026-1792256000 TuxCare security update for @react-native-community/cli-server-api (1 CVE)

TuxCare rebuilt @react-native-community/cli-server-api to address 1 CVE. Fixed in 12.3.0-tuxcare.1...

CLSA-2026-1792256001 TuxCare security update for @react-native-community/cli-server-api (1 CVE)

TuxCare rebuilt @react-native-community/cli-server-api to address 1 CVE. Fixed in 5.0.1-tuxcare.1...

CLSA-2026-1792255999 TuxCare security update for @react-native-community/cli-server-api (1 CVE)

TuxCare rebuilt @react-native-community/cli-server-api to address 1 CVE. Fixed in 12.3.7-tuxcare.2...

CLSA-2026-1792255997 TuxCare security update for @react-native-community/cli-server-api (1 CVE)

TuxCare rebuilt @react-native-community/cli-server-api to address 1 CVE. Fixed in 15.1.3-tuxcare.1...

CLSA-2026-1792255998 TuxCare security update for @react-native-community/cli-server-api (1 CVE)

TuxCare rebuilt @react-native-community/cli-server-api to address 1 CVE. Fixed in 15.1.3-tuxcare.2...

CLSA-2026-1792255995 TuxCare security update for @react-native-community/cli-server-api (1 CVE)

TuxCare rebuilt @react-native-community/cli-server-api to address 1 CVE. Fixed in 12.3.7-tuxcare.1...

CLSA-2026-1792255996 TuxCare security update for @react-native-community/cli-server-api (1 CVE)

TuxCare rebuilt @react-native-community/cli-server-api to address 1 CVE. Fixed in 13.6.9-tuxcare.1...

CLSA-2026-1792255994 TuxCare security update for @react-native-community/cli-server-api (1 CVE)

TuxCare rebuilt @react-native-community/cli-server-api to address 1 CVE. Fixed in 11.4.1-tuxcare.1...

CLSA-2026-1792226852 TuxCare security update for @react-native-community/cli-tools (1 CVE)

TuxCare rebuilt @react-native-community/cli-tools to address 1 CVE. Fixed in 13.6.9-tuxcare.3...

CLSA-2026-1792226851 TuxCare security update for @react-native-community/cli-tools (1 CVE)

TuxCare rebuilt @react-native-community/cli-tools to address 1 CVE. Fixed in 13.5.1-tuxcare.1...

CLSA-2026-1792226850 TuxCare security update for @react-native-community/cli-tools (1 CVE)

TuxCare rebuilt @react-native-community/cli-tools to address 1 CVE. Fixed in 13.6.8-tuxcare.1...