| Package | Affected versions | Patched versions |
|---|---|---|
| react-native | ≥ 0.59.0, < 0.64.1 | 0.64.1 |
| react-native | ≥ 0.59.0, < 0.62.3≥ 0.63.0, < 0.64.1 | 0.62.30.64.1 |
A regular expression denial of service (ReDoS) vulnerability in the validateBaseUrl function can cause the application to use excessive resources, become unresponsive, or crash. This was introduced in react-native version 0.59.0 and fixed in version 0.64.1.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free