Login Request a demo
RE
Product
React-dev-utils
by Facebook · last CVE Mar 9, 2021
2
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities2In the news0Timeline
Severity mix
Critical 1High 0Medium 1Low 0
Severity
All severities2Critical1High0Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add React-dev-utils to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-6342
9.8
3%
Dec 31
react-dev-utils on Windows allows developers to run a local webserver for accepting various commands, including a command to launch an editor
Affected: 1.0.0 before 1.0.4; 2.0.0 before 2.0.2; 3.0.0 before 3.1.2; 4.0.0 before 4.2.2; 5.0.0 before 5.0.2
CVE-2021-24033
5.6
3%
Mar 9
react-dev-utils prior to v11.0.4 exposes a function, getProcessForPort, where an input argument is concatenated into a command string to be executed
Affected: before 11.0.4
Showing 2