828 matches found
@adaptive-desktop/react-native (>=0.1.1, <=0.3.2), @adiraku/react-native-ui (>=1.2.8-canary-5, <=2.0.0-canary-4) +144 more potentially affected by CVE-2026-97724 via react-native-worklets (>=0.4.0, <=0.12.1)
react-native-worklets NPM version =0.4.0, =0.1.1, =1.2.8-canary-5, =0.1.0, =1.0.0, =1.0.0, =19.4.0--canary.373.4298.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.1.8 and more Source cves: CVE-2026-97724 Source advisory: SNYK:JS-REACTNATIVEWORKLETS-20158615...
Prototype Pollution
Overview react-native-worklets is a The React Native multithreading library Affected versions of this package are vulnerable to Prototype Pollution via the cloneObjectProperties serialization path in packages/react-native-worklets/src/memory/serializable.native.ts. An attacker can crash a React...
CVE-2026-97724
A prototype pollution vulnerability exists in Software Mansion React Native Worklets prior to version 0.12.2 . An attacker can provide a controlled object containing a proto property to modify the prototype of an object during serialization within the clonePlainJSObject function in packages/rea...
EUVD-2026-86500
A prototype pollution vulnerability in Software Mansion React Native Worklets before 0.12.2 allows an attacker-controlled object containing a proto property to modify the prototype of an object created during serialization in clonePlainJSObject in...
CVE-2026-97724
A prototype pollution vulnerability in Software Mansion React Native Worklets before 0.12.2 allows an attacker-controlled object containing a proto property to modify the prototype of an object created during serialization in clonePlainJSObject in...
CVE-2026-97724
A prototype pollution vulnerability in Software Mansion React Native Worklets before 0.12.2 allows an attacker-controlled object containing a proto property to modify the prototype of an object created during serialization in clonePlainJSObject in...
CVE-2026-97724
A prototype pollution vulnerability in Software Mansion React Native Worklets before 0.12.2 allows an attacker-controlled object containing a proto property to modify the prototype of an object created during serialization in clonePlainJSObject in...
CVE-2026-97724
A prototype pollution vulnerability in Software Mansion React Native Worklets before 0.12.2 allows an attacker-controlled object containing a proto property to modify the prototype of an object created during serialization in clonePlainJSObject in...
PT-2026-98344
Name of the Vulnerable Software and Affected Versions Software Mansion React Native Worklets versions prior to 0.12.2 Description Prototype pollution occurs when an attacker-controlled object containing a proto property modifies the prototype of an object created during serialization within the...
CVE-2026-97724: Improperly Controlled Modification of Object Prototype Attributes
A prototype pollution vulnerability in Software Mansion React Native Worklets before 0.12.2 allows an attacker-controlled object containing a proto property to modify the prototype of an object created during serialization in clonePlainJSObject in...
CVE-2026-97366
A security flaw has been discovered in jhen0409 react-native-debugger up to 0.14.0. The impacted element is the function openDevTools of the file electron/window.js of the component Open in Editor Handler. The manipulation of the argument host results in os command injection. It is possible to...
EUVD-2026-86461
A security flaw has been discovered in jhen0409 react-native-debugger up to 0.14.0. The impacted element is the function openDevTools of the file electron/window.js of the component Open in Editor Handler. The manipulation of the argument host results in os command injection. It is possible to...
CVE-2026-97366 jhen0409 react-native-debugger Open in Editor window.js openDevTools os command injection
A security flaw has been discovered in jhen0409 react-native-debugger up to 0.14.0. The impacted element is the function openDevTools of the file electron/window.js of the component Open in Editor Handler. The manipulation of the argument host results in os command injection. It is possible to...
CVE-2026-97366
A security flaw exists in jhen0409 react-native-debugger versions up to 0.14.0 . The vulnerability is located in the openDevTools function within the electron/window.js file of the Open in Editor Handler component. By manipulating the host argument, an attacker can trigger an os command injection...
CVE-2026-97366 jhen0409 react-native-debugger Open in Editor window.js openDevTools os command injection
A security flaw has been discovered in jhen0409 react-native-debugger up to 0.14.0. The impacted element is the function openDevTools of the file electron/window.js of the component Open in Editor Handler. The manipulation of the argument host results in os command injection. It is possible to...
PT-2026-98294
Name of the Vulnerable Software and Affected Versions react-native-debugger versions prior to 0.14.1 Description An OS command injection flaw exists in the Open in Editor Handler component. The issue occurs within the openDevTools function located in the electron/window.js file, where improper...
CVE-2026-97366: Improper Neutralization of Special Elements used in an OS Command
A security flaw has been discovered in jhen0409 react-native-debugger up to 0.14.0. The impacted element is the function openDevTools of the file electron/window.js of the component Open in Editor Handler. The manipulation of the argument host results in os command injection. It is possible to...
@novu/nextjs (>=3.0.0-canary.0, <=3.17.1-rc.1-rc.da35e9062d), @novu/react (>=3.0.0-canary.0, <=3.17.1-rc.1-rc.da35e9062d) +1 more potentially affected by CVE-2026-75510 via @novu/js (>=3.0.0, <=3.17.1-rc.1-rc.da35e9062d)
@novu/js NPM version =3.0.0, =3.0.0-canary.0, =3.0.0-canary.0, =2.6.8, =3.17.1-rc.1-rc.da35e9062d Source cves: CVE-2026-75510 Source advisory: OSV:GHSA-8GR3-5J6F-25GP...