Skip to content
OpenAdvisories

Product · dai-shi

use-reducer-async

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-48159

    use-reducer-async was vulnerable to malicious code execution via compromised commits

    use-reducer-async is a React useReducer with async actions. Between 2026-05-18 16:29:52 and 2026-05-19 15:26:07, the default branch contained malicious commits da72edbde5705efcec6c62e0a3dcb73687b78dc8 through df07d5711458d8b46e11dd7afaaa21e88cafabfb that exec…

    dai-shi use-reducer-async