CVE-2018-6342

npm/react-dev-utils CVE-2018-6342: high, EPSS 2.84%

react-dev-utils on Windows vulnerable to Remote Code Execution

Action: Upgrade react-dev-utils to 1.0.4 or later.

npm i react-dev-utils@1.0.4

npm i react-dev-utils@2.0.2

npm i react-dev-utils@3.1.2

npm i react-dev-utils@4.2.2

npm i react-dev-utils@5.0.2

Affected

Fixed versions

Sources

• osv: GHSA-29gp-92wp-94q8
• https://nvd.nist.gov/vuln/detail/CVE-2018-6342
• https://github.com/facebook/create-react-app/pull/4866
• https://github.com/advisories/GHSA-29gp-92wp-94q8
• https://github.com/facebook/create-react-app
• https://github.com/facebook/create-react-app/releases/tag/v1.1.5
• https://www.npmjs.com/advisories/695

CVE-2018-6342 · published 2019-01-04T17:41:20Z · modified 2023-11-08T04:00:21.268782Z · JSON