RE
Product
React-dev-utils
by Facebook · last CVE Mar 9, 2021
2
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 1Low 0
Watch

Add React-dev-utils to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-24033
5.6
3%
Mar 9
react-dev-utils prior to v11.0.4 exposes a function, getProcessForPort, where an input argument is concatenated into a command string to be executed
Affected: before 11.0.4
Showing 1