React Native Community

Tracked CVEs

Coverage timeline

• 
  U.S. CISA adds SmarterTools SmarterMail and React Native Community CLI flaws to its Known Exploited Vulnerabilities catalog

  securityaffairs.com · Feb 6, 2026
• 
  Critical SmarterMail Vulnerability Exploited in Ransomware Attacks

  www.securityweek.com · Feb 6, 2026
• 
  CVE-2025-11953 (Metro4Shell) in React Native Metro Server Enables RCE

  socradar.io · Feb 4, 2026
• 
  Silent Intrusion: “Metro4Shell” Exploited in the Wild Since December

  securityonline.info · Feb 4, 2026
• 
  Hackers abused React Native CLI flaw to deploy Rust malware before public disclosure

  securityaffairs.com · Feb 3, 2026
• 
  Hackers Exploit Metro4Shell RCE Flaw in React Native CLI npm Package

  thehackernews.com · Feb 3, 2026
• 
  Critical React Native Vulnerability Exploited in the Wild

  www.securityweek.com · Feb 3, 2026