R
Vendor security profile1 actively exploited CVEs
react
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs6
Critical2
CISA KEV1
Public exploit4
Patch rate%17
Avg. CVSS7.9
12-month vulnerability rate
4
1
0
0
0
0
0
0
0
0
0
1
CVE KEV
CVE severity distribution
6toplam CVE
Critical2 (33%)
High3 (50%)
Medium1 (17%)
Patch and exploitation view
%17
Verified patch
%17
CISA KEV
%67
Public exploit
1Patch available
0Partial
0Workaround
0Vendor: no patch
5Unknown
Latest vulnerabilities
9.5
7.5
CVE-2026-104827react/http: Unbounded HTTP Client Response Header Buffering Leads to Memory Exhaustion DoS
Patch status unknownEPSS %1
9.8
CVE-2025-11953 Actively exploitedOS command injection in React Native Community Cli
Patch verified Public Exploits:9EPSS %94