npm/react-devtools-core CVE-2023-5654: medium 6.5, EPSS 0.56%

React Developer Tools extension Improper Authorization vulnerability

Action: Upgrade react-devtools-core to 4.28.4 or later.

npm i react-devtools-core@4.28.4

Affected

Fixed versions

Sources

• osv: GHSA-rxrc-rgv4-jpvx
• https://nvd.nist.gov/vuln/detail/CVE-2023-5654
• https://github.com/facebook/react/pull/27417
• https://github.com/facebook/react/commit/09285d5a7f1c08bec09f44cec3d0518a603597fc
• https://github.com/facebook/react/commit/94d5b5b2bf5204ebd289a113989c0e2c51b626ef
• https://gist.github.com/CalumHutton/1fb89b64409570a43f89d1fd3274b231
• https://github.com/facebook/react

CVE-2023-5654 · published 2023-10-19T15:31:08Z · modified 2024-09-12T18:41:02Z · JSON