@react-native-community/cli-server-api

npm package metadata, published advisories, affected versions, and known-exploitation evidence.

npm latest 20.2.0 MIT

Evidence path

Version, exploitation, severity

RequestGuard keeps these facts separate. A KEV match refers to a CVE, while OSV supplies the package and version match.

Latest version

20.2.0

No matching published advisory returned

Known exploitation

No KEV match

Checked by exact CVE identifier

Highest advisory severity

Critical

1 active advisory

The registry confirms the version, then OSV checks advisories for that exact value.

Published records

GHSA-399j-vxmf-hjvr critical CISA KEV

Feb 5, 2026

Affected range

SEMVER: introduced 20.0.0-alpha.0; fixed 20.0.0SEMVER: introduced 19.0.0-alpha.0; fixed 19.1.2SEMVER: introduced 18.0.0; fixed 18.0.1

Fixed versions: 20.0.0, 19.1.2, 18.0.1