#supply-chain-security — Security Blog

Metro4Shell: React Native Dev Server Flaw Exploited in the Wild to Hijack Developer Machines

A trivially exploitable command-injection vulnerability in the React Native CLI's Metro development server is being actively exploited in the wild. CISA has added CVE-2025-11953 to its Known Exploited Vulnerabilities catalog — here's what every React Native team needs to know right now.

Radical Notion Team6 months ago

#supply-chain-security — Security Blog | RadicalNotion.AI