Known vulnerabilities in React
Vendor:
Facebook Inc.
Software:
React
Software CPE:
cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*
Website:
https://www.facebook.com/
Total vulnerabilities:
8
Public exploits:
4
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
19.2.8
19.1.9
19.0.8
19.2.7
19.1.8
19.0.7
19.2.6
19.1.7
19.0.6
19.2.5
19.1.6
19.0.5
19.2.4
19.1.5
19.0.4
19.2.3
19.1.4
19.0.3
19.2.2
19.1.3
19.0.2
19.2.1
19.1.2
19.0.1
19.2.0
19.1.1
19.1.0
19.0.0
18.3.1
18.3.0
18.2.0
18.1.0
18.0.0
17.0.2
17.0.1
17.0.0
16.14.0
16.13.1
16.13.0
16.12.0
16.11.0
16.10.2
16.10.1
16.10.0
16.9.0
16.8.6
16.8.5
16.8.4
16.8.3
16.8.2
16.8.1
16.8.0
16.7.0
16.6.3
16.6.1
16.6.0
16.5.2
16.5.1
16.5.0
16.4.2
16.4.1
16.4.0
16.3.2
16.3.1
16.3.0
16.2.0
16.1.1
16.1.0
16.0.0
15.7.0
15.6.2
15.6.1
15.6.0
15.5.4
15.5.3
15.5.2
15.5.1
15.5.0
15.4.2
15.4.1
15.4.0
15.3.2
15.3.1
15.3.0
15.2.1
15.2.0
15.1.0
15.0.2
15.0.1
15.0.0
1.2.5
0.14.10
0.14.8
0.14.7
0.14.6
0.14.5
0.14.4
0.14.3
0.14.2
0.14.1
0.14.0
0.13.3
0.13.2
0.13.1
0.13.0
0.12.2
0.12.1
0.12.0
0.11.2
0.11.1
0.11.0
0.10.0
0.9.0
0.8.0
0.5.2
0.5.1
0.5.0
0.4.2
0.4.1
0.4.0
0.3.3
0.3.0
Vulnerabilities (8)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU139050 - Resource exhaustion CVE-2026-44907 |
CWE-400 | Medium | 19.0.8, 19.1.9, 19.2.8 | 22.07.2026 |
SB2026072204 |
||
| #VU130269 - Allocation of Resources Without Limits or Throttling CVE-2026-23870 |
CWE-770 | Medium | 19.0.6, 19.1.7, 19.2.6 | 06.05.2026 |
SB2026050691 SB2026050696 |
||
| #VU125546 - Allocation of Resources Without Limits or Throttling CVE-2026-23869 |
CWE-770 | Medium | 19.0.5, 19.1.6, 19.2.5 | 09.04.2026 |
SB2026040920 SB2026040958 |
||
| #VU122048 - Resource exhaustion CVE-2026-23864 |
CWE-400 | Medium | 19.0.4, 19.1.5, 19.2.4 | 26.01.2026 |
SB2026012660 SB2026012703 |
||
| #VU119893 - Deserialization of Untrusted Data CVE-2025-67779 |
CWE-502 | Medium | 19.0.3, 19.1.4, 19.2.3 | 12.12.2025 |
SB2025121219 SB2025121222 SB2025122225 and 2 more |
||
| #VU119891 - Deserialization of Untrusted Data CVE-2025-55184 |
CWE-502 | Medium | 19.0.3, 19.1.4, 19.2.3 | 12.12.2025 |
SB2025121219 SB2025121220 SB2025122225 and 2 more |
||
| #VU119890 - Exposure of sensitive information to an unauthorized actor CVE-2025-55183 |
CWE-200 | Medium | 19.0.3, 19.1.4, 19.2.3 | 12.12.2025 |
SB2025121219 SB2025121221 SB2025122225 and 2 more |
||
| #VU119103 - Deserialization of Untrusted Data CVE-2025-55182 |
CWE-502 | Critical | 19.0.1, 19.1.2, 19.2.1 | 03.12.2025 |
SB2025120333 SB2025121823 SB2025121829 and 6 more |