Skip to content
OpenAdvisories

Product · Facebook

react-dev-utils

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.6
    CVE-2021-24033

    react-dev-utils OS Command Injection in function `getProcessForPort`

    react-dev-utils prior to v11.0.4 exposes a function, getProcessForPort, where an input argument is concatenated into a command string to be executed. This function is typically used from react-scripts (in Create React App projects), where the usage is safe. O…

    Facebook react-dev-utils react-dev-utils npm