← Database

CVE-2022-24373

MEDIUM CVSS: 5.3 Published: 2022-09-30 Modified: 2026-06-17

Description

The package react-native-reanimated before 3.0.0-rc.1 are vulnerable to Regular Expression Denial of Service (ReDoS) due to improper usage of regular expression in the parser of Colors.js.

Affected Platforms

Swmansion React Native Reanimated

Weakness Type

CWE-1333, CWE-1333

References