mirror of
https://github.com/facebook/react-native.git
synced 2025-11-01 09:14:26 +00:00
Andrew Datsenko
1b050b571e
Summary: Pull Request resolved: https://github.com/facebook/react-native/pull/48898 Changelog: [Internal] GitHub has identified a security vulnerability in a package dependency defined in the repository, facebook/react-native. Package name: undici Affected versions: >= 4.5.0, < 5.28.5 Fixed in version: 5.28.5 Severity: MODERATE Identifiers GHSA-c76h-2ccp-4975 CVE-2025-22150 References https://github.com/nodejs/undici/security/advisories/GHSA-c76h-2ccp-4975 https://nvd.nist.gov/vuln/detail/CVE-2025-22150 https://github.com/nodejs/undici/commit/711e20772764c29f6622ddc937c63b6eefdf07d0 https://github.com/nodejs/undici/commit/c2d78cd19fe4f4c621424491e26ce299e65e934a https://github.com/nodejs/undici/commit/c3acc6050b781b827d80c86cbbab34f14458d385 https://hackerone.com/reports/2913312 https://blog.securityevaluators.com/hacking-the-javascript-lottery-80cc437e3b7f https://github.com/nodejs/undici/blob/8b06b8250907d92fead664b3368f1d2aa27c1f35/lib/web/fetch/body.js#L113 https://github.com/advisories/GHSA-c76h-2ccp-4975 Reviewed By: NickGerleman Differential Revision: D68561080 fbshipit-source-id: 7aa71e959ac38f3e0f49d8503a471f60d2f44c5d
46 lines
1.1 KiB
JSON
46 lines
1.1 KiB
JSON
{
|
|
"name": "@react-native/dev-middleware",
|
|
"version": "0.77.0-main",
|
|
"description": "Dev server middleware for React Native",
|
|
"keywords": [
|
|
"react-native",
|
|
"tools"
|
|
],
|
|
"homepage": "https://github.com/facebook/react-native/tree/HEAD/packages/dev-middleware#readme",
|
|
"bugs": "https://github.com/facebook/react-native/issues",
|
|
"repository": {
|
|
"type": "git",
|
|
"url": "git+https://github.com/facebook/react-native.git",
|
|
"directory": "packages/dev-middleware"
|
|
},
|
|
"license": "MIT",
|
|
"exports": {
|
|
".": "./src/index.js",
|
|
"./package.json": "./package.json"
|
|
},
|
|
"files": [
|
|
"dist"
|
|
],
|
|
"dependencies": {
|
|
"@isaacs/ttlcache": "^1.4.1",
|
|
"@react-native/debugger-frontend": "0.77.0-main",
|
|
"chrome-launcher": "^0.15.2",
|
|
"chromium-edge-launcher": "^0.2.0",
|
|
"connect": "^3.6.5",
|
|
"debug": "^2.2.0",
|
|
"nullthrows": "^1.1.1",
|
|
"open": "^7.0.3",
|
|
"selfsigned": "^2.4.1",
|
|
"serve-static": "^1.16.2",
|
|
"ws": "^6.2.3"
|
|
},
|
|
"engines": {
|
|
"node": ">=18"
|
|
},
|
|
"devDependencies": {
|
|
"data-uri-to-buffer": "^6.0.1",
|
|
"undici": "^5.28.5",
|
|
"wait-for-expect": "^3.0.2"
|
|
}
|
|
}
|