#react-native — Security Blog

Metro4Shell: React Native Dev Server Flaw Exploited in the Wild to Hijack Developer Machines

A trivially exploitable command-injection vulnerability in the React Native CLI's Metro development server is being actively exploited in the wild. CISA has added CVE-2025-11953 to its Known Exploited Vulnerabilities catalog — here's what every React Native team needs to know right now.

Radical Notion Team6 months ago

#react-native — Security Blog | RadicalNotion.AI