expo
58.0.16 · 19 Oct 2026MIT7.1M / weekRepositoryHomepagenpmAtom feed
Security advisories
From OSV, open ones first. Each release line gets its own fix: an older major is fixed by a patch on that major, not by moving to the newest one.
Is your project affected?
Paste your package.json, or type the range you declare for expo. It is read in your browser and sent nowhere.
| Line | Newest | Where it stands |
|---|---|---|
| 58.0.16 | No known advisory | |
| 57.0.30 | No known advisory | |
| 56.0.23 | No known advisory | |
| 55.0.31 | No known advisory | |
| 54.0.37 | No known advisory | |
| 53.0.27 | No known advisory | |
| 52.0.49 | No known advisory | |
| 47.0.14 | 38 open advisories, worst critical · last release Apr 2023, no longer updated |
- CriticalExpo SDK has an OAuth vulnerabilityGHSA-wr5g-q49g-548w · 24 Apr 2023
- 47.x and older0.1.1 – 47.0.14No fix, no longer updated
- ModerateExpo on iOS is insecure due incorrect security attribute applicationGHSA-rwx9-wqj8-vr77 · 24 May 2022
- 1.x and older0.1.1 – 1.0.0No fix, no longer updated
Registry facts last checked 21 Oct 2026. Releases and advisories last read 21 Oct 2026.