CyberSecBulletin

React-native-community vulnerabilities

We track 1 vulnerability in React-native-community products. 1 is rated high or critical, and 1 has been exploited in real attacks. The most recent was published on November 3, 2025.

1vulnerabilities
1critical
0high
1exploited
9.8average CVSS score

Latest React-native-community vulnerabilities

  • 9.8 Critical severity

    React Native Community CLI OS Command Injection Exploited

    CVE-2025-11953React-native-communityEPSS 94%

    The Metro Development Server, which is opened by the React Native Community CLI, binds to external interfaces by default. The server exposes an endpoint that is vulnerable to OS command injection. This allows unauthenticated network attackers to send a POST re