Vendor/product archive

facebook / react-dev-utils CVEs

Beta · best-effort

2 CVEs tagged to facebook / react-dev-utils — 1 Critical, 0 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to facebook vendor archive

CVE-2021-24033

Published Mar 9, 2021

react-dev-utils prior to v11.0.4 exposes a function, getProcessForPort, where an input argument is concatenated into a command string to be executed. This function is typically us…

CVSS 5.6 · Medium

Vendor/product tagsBeta · best-effort

CVE-2018-6342

Published Dec 31, 2018

react-dev-utils on Windows allows developers to run a local webserver for accepting various commands, including a command to launch an editor. The input to that command was not pr…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1