← Back

React Native Community

react-native-community

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
React Native Community Cli
react_native_community_cli
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-11953
1React Native Community
1React Native Community Cli
Feb 6, 2026
Nov 3, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
The Metro Development Server, which is opened by the React Native Community CLI, binds to external interfaces by default. The server exposes an endpoint that is vulnerable to OS command injection. This allows unauthentic...Show more
The Metro Development Server, which is opened by the React Native Community CLI, binds to external interfaces by default. The server exposes an endpoint that is vulnerable to OS command injection. This allows unauthenticated network attackers to send a POST request to the server and run arbitrary executables. On Windows, the attackers can also execute arbitrary shell commands with fully controlled arguments.Show less