React Native Community

Records1All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

React Native Community records in CISA KEV

Products in the NVD configurations · select one to filter the records

1 record in React Native Community Cli · all components

TI-2025-10959 CVE-2025-11953 · GHSA-399j-vxmf-hjvr

CRITICAL 100KEV

The Metro Development Server, which is opened by the React Native Community CLI, binds to external interfaces by default.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.9398 Published 2025-11-03 Fixed in 20.0.0, 19.1.2 +1 CWE-78