GHSA-29gp-92wp-94q8High

react-dev-utils on Windows vulnerable to Remote Code Execution

Published
January 4, 2019
Last Modified
January 27, 2023

🔗 CVE IDs covered (1)

CVE-2018-6342 →

📋 Description

react-dev-utils on Windows is vulnerable to remote code execution.

Recommendation

Update to one of the following versions, depending on the release line that you are using.

  • 1.0.4
  • 2.0.2
  • 3.1.2
  • 4.2.2
  • 5.0.2
  • 6.0.0-next.a671462c

🎯 Affected products5

  • npm/react-dev-utils:>= 1.0.0, < 1.0.4
  • npm/react-dev-utils:>= 2.0.0, < 2.0.2
  • npm/react-dev-utils:>= 3.0.0, < 3.1.2
  • npm/react-dev-utils:>= 4.0.0, < 4.2.2
  • npm/react-dev-utils:>= 5.0.0, < 5.0.2

🔗 References (5)