CRITICAL REACT NATIVE CLI FLAW EXPOSED MILLIONS OF DEVELOPERS TO REMOTE ATTACKS

Summary from the TLDR InfoSec newsletter

A severe vulnerability in the widely used @react-native-community/cli npm package posed a high risk, allowing remote attackers to execute malicious OS commands on developers' machines running the React Native development server. Affecting millions and scoring 9.8 in severity, the flaw was patched in version 20.0.0.