Approved changes feed: RSS · Atom

cpe:2.3:a:swmansion:react_native_reanimated:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSwmansion (36e023cd-5f10-5561-91a1-5f82250f2cfa)
ProductReact Native Reanimated (f57cc387-7ba7-5874-a066-02d136cd09a4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/software-mansion/react-native-reanimated purl2cpe 2026-06-01 10:11:35.110060
pkg:npm/react-native-reanimated purl2cpe 2026-06-01 10:11:35.110063

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-24373 vulnerable 2026-06-08 05:41:00.201472 Regular Expression Denial of Service (ReDoS)
MEDIUM (5.3)
The package react-native-reanimated before 3.0.0-rc.1 are vulnerable to Regular Expression Denial of Service (ReDoS) due to improper usage of regular expression in the parser of Colors.js.
Published: 2022-09-30T05:00:17.564Z
Updated: 2025-05-20T20:15:02.309Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.