ZeusQA
Start free

Known exploited vulnerabilities

React Native Community vulnerabilities attackers have used

Every React Native Community vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 1 React Native Community vulnerability as exploited in the wild, 1 of them added in the last 12 months. The most recent is CVE-2025-11953, added Feb 5, 2026. CLI has the most entries (1).

In KEV, all time
1
Added, last 12 months
1
Used in ransomware
0
New CVEs this week
0

Every React Native Community entry in CISA KEV

  1. CVE-2025-11953

    Added · due

    React Native Community CLI OS Command Injection Vulnerability

    React Native Community CLI contains an OS command injection vulnerability which could allow unauthenticated network attackers to send POST requests to the Metro Development Server and run arbitrary executables via a vulnerable endpoint…

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.

Start freeSee how a run works