Skip to content
OpenAdvisories

Package · npm

react-devtools-core

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2023-5654

    React Developer Tools extension Improper Authorization vulnerability

    The React Developer Tools extension registers a message listener with window.addEventListener('message', <listener>) in a content script that is accessible to any webpage that is active in the browser. Within the listener is code that requests a URL derived f…

    Meta React Developer Tools Extension react-devtools-core npm