react-dom

19.3.1 · 14 Oct 2026MIT109.4M / weekRepository Homepage npm Atom feed

Security advisories

From OSV. Open ones first, then the most severe. "Fixed in" is read against the latest release, 19.3.1.

Severity	Advisory	Affected	Fixed in
Moderate	Cross-Site Scripting in react-domGHSA-mvjj-gqq2-p4hw · 4 Jan 2019	>= 16.0.0, < 16.0.1 · >= 16.1.0, < 16.1.2 · >= 16.2.0, < 16.2.1 · >= 16.3.0, < 16.3.3 · >= 16.4.0, < 16.4.2	16.4.2

What npm and deps.dev say about the latest release. Signals, not a verdict.

Reading npm and deps.dev…

Registry facts last checked 20 October 2026. Releases and advisories last read 20 October 2026.