use-reducer-async vulnerabilities

1 known vulnerability in use-reducer-async from Dai-shi. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.3 Critical severity

  use-reducer-async: Embedded Malicious Code

  CVE-2026-48159Aug 10, 2026Dai-shi

  use-reducer-async is a React useReducer with async actions. Between 2026-05-18 16:29:52 and 2026-05-19 15:26:07, the default branch contained malicious commits da72edbde5705efcec6c62e0a3dcb73687b78dc8 through df07d5711458d8b46e11dd7afaaa21e88cafabfb that execu