VENDOR

react vulnerabilities: CVEs, exploitation and patches

Every react CVE reviewed by Diras Labs analysts, newest first, with exploitation status and fixes.

CVE-2026-14802
Create-react-app os command injection in react-dev-utils openBrowser react create-react-app · Sep 29, 2026
- PoC PUBLIC
HIGH 7.3