Read the docs

Expo

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Expo records in CISA KEV

No Expo vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Expo 1 record MEDIUM Expo Software Development Kit 1 record MEDIUM

Records

2 records

TI-2023-12710 CVE-2023-28131 · GHSA-wr5g-q49g-548w

Insufficiently protected credentials in Expo.io Expo AuthSession module

Priority MEDIUM 63

A vulnerability in the expo.io framework allows an attacker to take over accounts and steal credentials on an application/website that configured the "Expo AuthSession Redirect Proxy" for social sign-in.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.23165 Published 2023-04-24 Fixed in 48.0.0 CWE-522
TI-2020-15121 CVE-2020-24653 · GHSA-rwx9-wqj8-vr77

secure-store in Expo through 2.16.1 on iOS provides the insecure…

Priority MEDIUM 44

secure-store in Expo through 2.16.1 on iOS provides the insecure kSecAttrAccessibleAlwaysThisDeviceOnly policy when WHEN_UNLOCKED_THIS_DEVICE_ONLY is used.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0117 Published 2020-08-26 Fixed in 9.1.0
Open these records in search →