npm react-native-keys vulnerabilities

Latest npm react-native-keys CVEs

Newest publication first

1. CVE-2025-45001 react-native-keys insecurely stores encryption cipher and Base64 chunks

   Published 2025-06-09

   High·CVSS 7.5 EPSS 0.20% PoC

   react-native-keys 0.7.11 is vulnerable to sensitive information disclosure (remote) as encryption cipher and Base64 chunks are stored as plaintext in the compiled native binary. Attackers can extract these secrets using basic static analysis tools.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.