https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:58:57 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-237931 EUVD-2026-237931 https://cve.radiocsirt.org/vuln/euvd-2026-237931 https://cve.radiocsirt.org/vuln/fkie_cve-2018-6342 <p>react-dev-utils on Windows allows developers to run a local webserver for accepting various commands, including a command to launch an editor. The input to that command was not properly sanitized, allowing an attacker who can make a network request to the server (either via CSRF or by direct request) to execute arbitrary commands on the targeted system. This issue affects multiple branches: 1.x.x prior to 1.0.4, 2.x.x prior to 2.0.2, 3.x.x prior to 3.1.2, 4.x.x prior to 4.2.2, and 5.x.x prior to 5.0.2.</p> <p>react-dev-utils on Windows allows developers to run a local webserver for accepting various commands, including a command to launch an editor. The input to that command was not properly sanitized, allowing an attacker who can make a network request to the server (either via CSRF or by direct request) to execute arbitrary commands on the targeted system. This issue affects multiple branches: 1.x.x prior to 1.0.4, 2.x.x prior to 2.0.2, 3.x.x prior to 3.1.2, 4.x.x prior to 4.2.2, and 5.x.x prior to 5.0.2.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-6342 https://cve.radiocsirt.org/vuln/ghsa-29gp-92wp-94q8 <p><strong>Affected:</strong> npm: react-dev-utils</p> <p>`react-dev-utils` on Windows is vulnerable to remote code execution.</p> <p>## Recommendation</p> <p>Update to one of the following versions, depending on the release line that you are using. - 1.0.4 - 2.0.2 - 3.1.2 - 4.2.2 - 5.0.2 - 6.0.0-next.a671462c</p> <p><strong>Affected:</strong> npm: react-dev-utils</p> <p>`react-dev-utils` on Windows is vulnerable to remote code execution.</p> <p>## Recommendation</p> <p>Update to one of the following versions, depending on the release line that you are using. - 1.0.4 - 2.0.2 - 3.1.2 - 4.2.2 - 5.0.2 - 6.0.0-next.a671462c</p> https://cve.radiocsirt.org/vuln/ghsa-29gp-92wp-94q8 https://cve.radiocsirt.org/vuln/gsd-2018-6342 gsd-2018-6342 https://cve.radiocsirt.org/vuln/gsd-2018-6342