Skip to content
OpenAdvisories

Package · npm

react-dev-utils

3 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.8

    react-dev-utils on Windows vulnerable to Remote Code Execution

    react-dev-utils on Windows allows developers to run a local webserver for accepting various commands, including a command to launch an editor. The input to that command was not properly sanitized, allowing an attacker who can make a network request to the ser…