CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2025-11-03
React Native Community CLI Remote Code Execution (RCE) Vulnerability Advisory (CVE-2025-11953)
[Affected Scope] Metro Development Server started by React Native Community CLI (binding to external interfaces by default)
[Impact] Unauthenticated network attackers can send a POST request to execute arbitrary executables, and run arbitrary shell commands with controlled arguments on Windows
[Mitigation] Upgrade React Native CLI to the patched version, restrict Metro server binding to localhost (127.0.0.1), and block external access via firewalls