Approved changes feed: RSS · Atom

cpe:2.3:a:facebook:react-native:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorFacebook (c319c35a-3469-5baa-b3bd-8582d1206a92)
ProductReact Native (a5ddd06d-9a11-52d0-b09b-c0cfb04684ac)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/facebook/react-native purl2cpe 2026-06-01 10:11:42.982675

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-1920 vulnerable 2026-06-03 14:41:59.067443 Details available
A regular expression denial of service (ReDoS) vulnerability in the validateBaseUrl function can cause the application to use excessive resources, become unresponsive, or crash. This was introduced in react-native version 0.59.0 and fixed in version 0.64.1.
Published: 2021-06-01T11:45:12.000Z
Updated: 2024-08-04T06:54:00.363Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-1920 not_vulnerable 2026-06-03 14:41:59.067392 Details available
A regular expression denial of service (ReDoS) vulnerability in the validateBaseUrl function can cause the application to use excessive resources, become unresponsive, or crash. This was introduced in react-native version 0.59.0 and fixed in version 0.64.1.
Published: 2021-06-01T11:45:12.000Z
Updated: 2024-08-04T06:54:00.363Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.