Repository navigation

[DevTools Bug]: CVE-2024-29415 (`ip` dependency) #29724

Closed

Labels

Component: Developer ToolsStatus: UnconfirmedType: Bug

opened

Website or app

https://github.com/facebook/react

Repro steps

See this vulnerability GHSA-2p57-rm9w-gvfp

Can the version of ip be updated to at least v2.0.1 for react-devtools?

How often does this bug happen?

Every time

DevTools package (automated)

No response

DevTools version (automated)

No response

Error message (automated)

No response

Error call stack (automated)

No response

Error component stack (automated)

No response

GitHub query string (automated)

No response

simioliolio
added
Component: Developer Tools

Status: UnconfirmedA potential issue that we haven't yet confirmed as a bug

Type: Bug
on Jun 3, 2024
Rekl0w
added a commit that references this issue on Jun 3, 2024
Fix react#29724: ip dependency update for CVE-2024-29415
8eb43ad
Rekl0w commented on Jun 3, 2024
Rekl0w
on Jun 3, 2024
Contributor
I submitted a PR about it.
Reacted by Simon Haycock
hoxyq
closed this as completedin 8d87e37 on Jun 5, 2024
github-actions
added a commit that references this issue on Jun 5, 2024
Fix #29724: `ip` dependency update for CVE-2024-29415 (#29725)
612c599
hoxyq commented on Jun 5, 2024
hoxyq
on Jun 5, 2024
Collaborator
Another CVE should be mitigated by #29772
hoxyq
added a commit that references this issue on Jun 18, 2024
React DevTools 5.2.0 -> 5.3.0 (#29918)
1434af3

to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Assignees

No one assigned

Labels

Component: Developer ToolsStatus: UnconfirmedType: Bug

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests