Skip to content

feat: Reat Native Support - #35

Open
jaredperreault-okta wants to merge 7 commits into
masterfrom
jp-react-native-sdk
Open

feat: Reat Native Support#35
jaredperreault-okta wants to merge 7 commits into
masterfrom
jp-react-native-sdk

Conversation

@jaredperreault-okta

Copy link
Copy Markdown
Contributor

No description provided.

@jaredperreault-okta jaredperreault-okta changed the title Jp react native sdk feat: Reat Native Support Jun 12, 2026
Comment thread e2e/apps/react-native-oidc/package.json Outdated
"expo-system-ui": "~6.0.8",
"expo-web-browser": "~15.0.9",
"react": "19.1.0",
"react-dom": "19.1.0",

@semgrep-code-okta semgrep-code-okta Bot Jun 12, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Vulnerable version of React-DOM PINNED (CVE-2025-55182 / React2Shell). React-DOM 19.0.0, 19.1.0, 19.1.1, or 19.2.0 may contain vulnerable React Server Components affected by a critical remote code execution vulnerability (CVSS 10.0). Update to React-DOM 19.0.1, 19.1.2, or 19.2.1 or later.

🥳 Fixed in commit b293f6e 🥳

Comment thread e2e/apps/react-native-oidc/package.json Outdated
"expo-symbols": "~1.0.7",
"expo-system-ui": "~6.0.8",
"expo-web-browser": "~15.0.9",
"react": "19.1.0",

@semgrep-code-okta semgrep-code-okta Bot Jun 12, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Vulnerable version of React PINNED (CVE-2025-55182 / React2Shell). React 19.0.0, 19.1.0, 19.1.1, or 19.2.0 contain vulnerable React Server Components affected by a critical remote code execution vulnerability (CVSS 10.0). Update to React 19.0.1, 19.1.2, or 19.2.1 or later.

🚀 Fixed in commit b293f6e 🚀

Comment thread yarn.lock Outdated
Comment on lines +12900 to +12902

react-dom@19.0.1:
version "19.0.1"
resolved "https://registry.yarnpkg.com/react-dom/-/react-dom-19.0.1.tgz#b856cbfe38e002b485803d5a0692ee600832edbd"
integrity sha512-3TJg51HSbJiLVYCS6vWwWsyqoS36aGEOCmtLLHxROlSZZ5Bk10xpxHFbrCu4DdqgR85DDc9Vucxqhai3g2xjtA==
react-dom@19.1.0:
version "19.1.0"

@semgrep-code-okta semgrep-code-okta Bot Jun 12, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Vulnerable version of React-DOM PINNED (CVE-2025-55182 / React2Shell). React-DOM 19.0.0, 19.1.0, 19.1.1, or 19.2.0 may contain vulnerable React Server Components affected by a critical remote code execution vulnerability (CVSS 10.0). Update to React-DOM 19.0.1, 19.1.2, or 19.2.1 or later.

🎈 Fixed in commit b293f6e 🎈

Comment thread yarn.lock Outdated
Comment on lines +13147 to +13149

react@19.0.1:
version "19.0.1"
resolved "https://registry.yarnpkg.com/react/-/react-19.0.1.tgz#0fb9523201af5f8c7aee753a825d1d9d2f9769db"
integrity sha512-nVRaZCuEyvu69sWrkdwjP6QY57C+lY+uMNNMyWUFJb9Z/JlaBOQus7mSMfGYsblv7R691u6SSJA/dX9IRnyyLQ==
react@19.1.0:
version "19.1.0"

@semgrep-code-okta semgrep-code-okta Bot Jun 12, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Vulnerable version of React PINNED (CVE-2025-55182 / React2Shell). React 19.0.0, 19.1.0, 19.1.1, or 19.2.0 contain vulnerable React Server Components affected by a critical remote code execution vulnerability (CVSS 10.0). Update to React 19.0.1, 19.1.2, or 19.2.1 or later.

Fixed in commit b293f6e

@jaredperreault-okta
jaredperreault-okta marked this pull request as ready for review September 9, 2026 20:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant