1.
JFrog discloses CVE-2025-11953 (CVSS 9.8): unauthenticated RCE in the @react-native-community/cli dev server lets attackers run OS commands; a related flaw exposes Metro to network attacks.
Skip to content
Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2025-11953.