Skip to content
OpenAdvisories

Package · npm

react-dev-utils

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 7.3
    CVE-2026-14802 Public exploit

    react create-react-app react-dev-utils openBrowser.js startBrowserProcess os command injection

    A vulnerability was detected in react create-react-app up to 5.0.1 on macOS. This affects the function startBrowserProcess of the file openBrowser.js of the component react-dev-utils. Performing a manipulation results in os command injection. Remote exploitat…

    react create-react-app react-dev-utils npm
  • Medium 5.6
    CVE-2021-24033

    react-dev-utils OS Command Injection in function `getProcessForPort`

    react-dev-utils prior to v11.0.4 exposes a function, getProcessForPort, where an input argument is concatenated into a command string to be executed. This function is typically used from react-scripts (in Create React App projects), where the usage is safe. O…

    Facebook react-dev-utils react-dev-utils npm
  • Critical 9.8
    CVE-2018-6342

    react-dev-utils on Windows vulnerable to Remote Code Execution

    react-dev-utils on Windows allows developers to run a local webserver for accepting various commands, including a command to launch an editor. The input to that command was not properly sanitized, allowing an attacker who can make a network request to the ser…

    Facebook react-dev-utils react-dev-utils npm