A prototype pollution vulnerability in Software Mansion React Native Worklets before 0.12.2 allows an attacker-controlled object containing a __proto__ property to modify the prototype of an object created during seriali…
CVSS 4.0MEDIUM 5.3·Network·No auth·User interaction·EPSS 0.00307·Published 2026-09-25·Fixed in worklets-0.12.2CWE-1321
The package react-native-reanimated before 3.0.0-rc.1 are vulnerable to Regular Expression Denial of Service (ReDoS) due to improper usage of regular expression in the parser of Colors.js.
CVSS 3.1HIGH 7.5·Network·No auth·No interaction·EPSS 0.01637·Published 2022-09-30·Fixed in 3.0.0-rc.1, 2.10.0CWE-1333