redux-devtools vulnerabilities

CVEs whose affected-version data names the redux-devtools package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-117526Medium· 5.3

yesterday

reduxjs redux-devtools Remotedev Server evalAction code injection

A vulnerability was found in reduxjs redux-devtools 5.0.0. Affected by this vulnerability is the function evalAction of the component Remotedev Server. The manipulation of the argument action results in code injection. The attack is only…

▾ Sunlitreduxjs · redux-devtoolsvia CVEORG