React Native Community Cli

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-11953 Nov 03, 17:15 npm CRITICAL POC KEV PATCH THREAT Act Now

React Native Metro Development Server binds to external interfaces by default and contains an OS command injection endpoint, allowing unauthenticated network attackers to execute arbitrary code.

Windows Command Injection Microsoft Red Hat React Native Community Cli

NVD GitHub

CVSS 3.1

9.8

EPSS

3.4%

Threat

5.1

CVE-2025-11953 npm

EPSS 3% 5.1 CVSS 9.8

CRITICAL POC KEV PATCH THREAT Act Now

React Native Metro Development Server binds to external interfaces by default and contains an OS command injection endpoint, allowing unauthenticated network attackers to execute arbitrary code.

Windows Command Injection Microsoft +2

NVD GitHub