Details have emerged about a now-patched critical security flaw in the popular « @react-native-community/cli » npm package that could be potentially exploited to run malicious operating system (OS) commands under certain conditions.
« The vulnerability allows remote unauthenticated attackers to easily trigger arbitrary OS command execution on the machine running react-native-community/cli’s
