Login Request a demo
RE
Product
React
by Facebook · last CVE Jan 26, 2026
On CISA KEVExploited in the wildRansomware-linked
6
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities6In the news5Timeline
Severity mix
Critical 1High 3Medium 2Low 0
Severity
All severities6Critical1High3Medium2Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add React to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-6341
6.1
3%
Dec 31
React applications which rendered to HTML using the ReactDOMServer API were not escaping user-supplied attribute names at render-time
Affected: 16.0.0 before 16.0.1; 16.1.0 before 16.1.2; 16.2.0 before 16.2.1; 16.3.0 before 16.3.3; 16.4.0 before 16.4.2
CVE-2025-55183
5.3
64%
Dec 11
An information leak vulnerability exists in specific configurations of React Server Components versions 19.0.0, 19.0.1 19.1.0, 19.1.1, 19.1.2, 19.2.0 and 19.2.1, including the…
Affected: 19.0.0 before 19.0.2; 19.1.0 before 19.1.3; 19.2.0 before 19.2.2
Showing 2