react-native-community vulnerabilities

Recent CVEs affecting react-native-community products. 1 tracked.

react-native-community has 1 tracked vulnerability, 1 critical and 1 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 1. Most recent: 2025-11-03. Highest priority: CVE-2025-11953 (score 97/100).

• CVE-2025-11953 CRITICAL 9.8 EXPLOITED UPGRADE React Native Community CLI OS Command Injection Vulnerability

FAQ

How do I fix react-native-community vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is react-native-community being exploited right now?

Yes: 1 react-native-community CVE is on the CISA Known Exploited Vulnerabilities list, so patch it first.

Which react-native-community CVE should I patch first?

CVE-2025-11953 currently ranks highest (97/100): React Native Community CLI OS Command Injection Vulnerability.

Products

• react native community cli

← Back to latest CVEs