VDB
MAL-2025-192973
MAL-2025-192973
PUBLISHED
Malicious code in react-dom-bindings (npm)
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| npm | react-dom-bindings | 0, 0 |
Timeline
- Dec 30, 2025 CVE Published
- Jan 2, 2026 CVE Updated
References
- https://github.com/advisories/GHSA-r2mv-xp84-8cc6 vendor-advisory