React security advisory (AV26-1152)
Serial number: AV26-1152 Date: November 12, 2026 As of November 10, 2026, React is affected by a vulnerability in the following product: react Prior to 19.0.9 Prior to 19.1.10 Prior to 19.2.9 Prior to 19.3.1 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.
Summary from Canadian Centre for Cyber Security.