CVE security advisories and vulnerability history for react.
react has 7 published CVE records since 2025, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 3 have a known public exploit. The average CVSS base score across scored CVEs is 7.8.
A quick read on react's vulnerability posture, as a share of its 7 published CVEs.
across 7 scored CVEs
6 of 7 scored
1 of 7 CVEs
3 of 7 CVEs
6 of 7 CVEs
How the CVSS severity of react's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
In CISA’s Known Exploited Vulnerabilities catalog
1
One of react's CVEs is confirmed exploited in the wild.
Public exploits
3
3 of react's CVEs have a known public exploit available.
The react products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.
The CWE weakness categories most often found in react CVEs. Follow any weakness for its full explanation.
The CVE Numbering Authorities that publish react CVE records.
How many react CVEs were published each year.
The most recently disclosed vulnerabilities affecting react.
Get an alert for each new react CVE, with AI-written analysis and remediation steps.
Monitor react CVEsCVE counts for other vendors.
Common questions about react vulnerabilities.
Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.
Get an alert for each new react CVE, with AI-written analysis and remediation steps.
