Vulnerability GHSA-29gp-92wp-94q8
High Risk
HIGH RISK
CVSS Score: 8.0
Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
7 years ago
January 04, 2019 at 05:41 PM UTC
react-dev-utils on Windows vulnerable to Remote Code Execution
1.0.0 - 1.0.3 and 2.0.0 - 2.0.1 and 3.0.0 - 3.1.1 and 4.0.0 - 4.2.1 and 5.0.0 - 5.0.1
1.0.0 - 1.0.3 and 2.0.0 - 2.0.1 and 3.0.0 - 3.1.1 and 4.0.0 - 4.2.1 and 5.0.0 - 5.0.1
Summary
react-dev-utils on Windows vulnerable to Remote Code Execution
Details
react-dev-utils on Windows is vulnerable to remote code execution.
Recommendation
Update to one of the following versions, depending on the release line that you are using.
- 1.0.4
- 2.0.2
- 3.1.2
- 4.2.2
- 5.0.2
- 6.0.0-next.a671462c
Related Vulnerabilities
Other vulnerabilities affecting the same packages
High Risk
2 months ago
react-dev-utils openBrowser permits command injection on macOS
0.0.0 - 5.0.1 GHSA-g9g6-gvq9-j4vp
0.0.0 - 5.0.1 GHSA-g9g6-gvq9-j4vp
Medium Risk
5 years ago
react-dev-utils OS Command Injection in function `getProcessForPort`
0.4.0 - 11.0.3 GHSA-5q6m-3h65-w53x
0.4.0 - 11.0.3 GHSA-5q6m-3h65-w53x
Impacted packages
Timeline
Published
7 years ago
January 04, 2019 at 05:41 PM UTC
Fixed (1.0.4)
Unknown
Unknown
Fixed (2.0.2)
Unknown
Unknown
Fixed (3.1.2)
Unknown
Unknown
Fixed (4.2.2)
Unknown
Unknown
Fixed (5.0.2)
Unknown
Unknown
Last Modified
2 years ago
November 08, 2023 at 04:00 AM UTC