facebook/create-react-app · Security
react-dev-utils on Windows vulnerable to Remote Code Execution
- GHSA ID
- GHSA-29gp-92wp-94q8
- CVE ID
- CVE-2018-6342
- Severity
- high
- Published
- Updated
Description
react-dev-utils on Windows is vulnerable to remote code execution.
Recommendation
Update to one of the following versions, depending on the release line that you are using.
- 1.0.4
- 2.0.2
- 3.1.2
- 4.2.2
- 5.0.2
- 6.0.0-next.a671462c
CWEs
- CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')