# react-devtools-core (npm) vulnerabilities 1 known vulnerability (1 medium), with the versions each affects and the releases that fix them. ## At a glance - Latest release: not known (cve.now hasn't read this package's releases) - Newest unaffected release: not known without release data - Registry: https://www.npmjs.com/package/react-devtools-core ## Advisories (1) ### [CVE-2023-5654](https://cve.now/CVE-2023-5654): The React Developer Tools extension registers a message listener with window.addEventListener('message', \) in a content script… - Severity: Medium 6.5 - Published: Oct 19, 2023 - Affected: fixed in 4.28.4. --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/packages/npm/react-devtools-core Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.