ROOT-APP-NPM-CVE-2024-25466 CVE-2024-25466 in react-native-document-picker - Patched by Root

Root has patched CVE-2024-25466 in the react-native-document-picker package for Root:npm. Multiple fixed versions available...

CVE-2024-25466

Directory Traversal vulnerability in React Native Document Picker before v.9.1.1 and fixed in v.9.1.1 allows a local attacker to execute arbitrary code via a crafted script to the Android library component...

@icanbwell/composite (>=1.89.4, <=1.202.0), @icanbwell/native-components (>=0.21.6, <=0.31.0) +4 more potentially affected by CVE-2024-25466 via react-native-document-picker (>=9.0.1, <=9.1.0)

react-native-document-picker NPM version =9.0.1, =1.89.4, =0.21.6, =0.14.5, =1.1.0, =1.8.0 - @likeminds.community/feed-rn-core 0.6.0 - @likeminds.community/feed-rn-core-beta 0.0.1 Source cves: CVE-2024-25466 Source advisory: OSV:GHSA-PMGM-H3CC-M4HJ...

@kafudev/react-native-shell (>=0.66.4-beta.18, <=0.66.5-beta.8), @likeminds.community/chat-rn-core (>=0.5.0, <=1.0.1) +4 more potentially affected by CVE-2024-25466 via react-native-document-picker (>=8.0.0, <=8.2.0)

react-native-document-picker NPM version =8.0.0, =0.66.4-beta.18, =0.5.0, =0.0.8, =0.0.1, =0.5.0, =0.5.14 - yan-react-hook-form 0.1.7 Source cves: CVE-2024-25466 Source advisory: OSV:GHSA-PMGM-H3CC-M4HJ...

CVE-2024-25466

Directory Traversal vulnerability in React Native Document Picker before v.9.1.1 and fixed in v.9.1.1 allows a local attacker to execute arbitrary code via a crafted script to the Android library component...