[Snyk] Upgrade react-native-web from 0.17.1 to 0.21.2 by github-anis-snoussi · Pull Request #630 · github-anis-snoussi/CutCat

github-anis-snoussi · 2025-12-29T08:38:29Z

Snyk has created this PR to upgrade react-native-web from 0.17.1 to 0.21.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 37 versions ahead of your current version.
The recommended version was released 2 months ago.

Issues fixed by the recommended upgrade:

Issue	Score	Exploit Maturity
Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	482	Proof of Concept
Prototype Pollution SNYK-JS-UNSETVALUE-2400660	482	No Known Exploit
Improper Input Validation SNYK-JS-URLPARSE-2407770	482	Proof of Concept
Denial of Service (DoS) SNYK-JS-WS-7266574	482	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	482	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	482	Proof of Concept
Prototype Pollution SNYK-JS-ASYNC-2441827	482	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-AXIOS-1579269	482	Proof of Concept
Excessive Platform Resource Consumption within a Loop SNYK-JS-BRACES-6838727	482	Proof of Concept
Excessive Platform Resource Consumption within a Loop SNYK-JS-BRACES-6838727	482	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-CROSSSPAWN-8303230	482	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-CROSSSPAWN-8303230	482	Proof of Concept
Denial of Service (DoS) SNYK-JS-DECODEURICOMPONENT-3149970	482	Proof of Concept
Improper Handling of Extra Parameters SNYK-JS-FOLLOWREDIRECTS-6141137	482	Proof of Concept
Server-side Request Forgery (SSRF) SNYK-JS-IP-12704893	482	Proof of Concept
Server-side Request Forgery (SSRF) SNYK-JS-IP-12761655	482	Proof of Concept
Server-side Request Forgery (SSRF) SNYK-JS-IP-6240864	482	Proof of Concept
Prototype Pollution SNYK-JS-PLIST-2405644	482	Proof of Concept
Access Restriction Bypass SNYK-JS-URLPARSE-2401205	482	Proof of Concept
Authorization Bypass SNYK-JS-URLPARSE-2407759	482	Proof of Concept
Authorization Bypass Through User-Controlled Key SNYK-JS-URLPARSE-2412697	482	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-WS-1296835	482	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-BABELHELPERS-9397697	482	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-BABELRUNTIME-10044504	482	Proof of Concept
Incomplete List of Disallowed Inputs SNYK-JS-BABELTRAVERSE-5962462	482	Proof of Concept
Use After Free SNYK-JS-HERMESENGINE-1309667	482	No Known Exploit
Out-of-Bounds SNYK-JS-HERMESENGINE-1727253	482	No Known Exploit
Remote Code Execution (RCE) SNYK-JS-SHELLQUOTE-1766506	482	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-TMPL-1583443	482	Proof of Concept
Information Exposure SNYK-JS-FOLLOWREDIRECTS-2332181	482	Proof of Concept
Information Exposure SNYK-JS-FOLLOWREDIRECTS-6444610	482	Proof of Concept
Cross-site Scripting (XSS) SNYK-JS-HERMESENGINE-1015406	482	No Known Exploit
Denial of Service (DoS) SNYK-JS-HERMESENGINE-2342071	482	No Known Exploit
Prototype Pollution SNYK-JS-HERMESENGINE-608850	482	No Known Exploit
Denial of Service (DoS) SNYK-JS-HERMESENGINE-629268	482	No Known Exploit
Out-of-Bounds SNYK-JS-HERMESENGINE-629748	482	No Known Exploit
Server-Side Request Forgery (SSRF) SNYK-JS-IP-7148531	482	Proof of Concept
Prototype Pollution SNYK-JS-JSON5-3182856	482	Proof of Concept
Prototype Pollution SNYK-JS-JSON5-3182856	482	Proof of Concept
Prototype Pollution SNYK-JS-JSON5-3182856	482	Proof of Concept
Prototype Pollution SNYK-JS-JSYAML-13961110	482	No Known Exploit
Inefficient Regular Expression Complexity SNYK-JS-MICROMATCH-6838728	482	No Known Exploit
Inefficient Regular Expression Complexity SNYK-JS-MICROMATCH-6838728	482	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-3050818	482	No Known Exploit
Improper Handling of Unexpected Data Type SNYK-JS-ONHEADERS-10773729	482	No Known Exploit
Improper Authorization SNYK-JS-REACTDEVTOOLSCORE-6023999	482	Proof of Concept
Symlink Attack SNYK-JS-TMP-11501554	482	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-BRACEEXPANSION-9789073	482	Proof of Concept
Information Exposure SNYK-JS-FOLLOWREDIRECTS-2396346	482	No Known Exploit
Prototype Pollution SNYK-JS-MINIMIST-2429795	482	Proof of Concept
Cross-site Scripting SNYK-JS-SEND-7926862	482	No Known Exploit
Cross-site Scripting SNYK-JS-SERVESTATIC-7926865	482	No Known Exploit

Release notes

Package name: react-native-web

0.21.2 - 2025-10-16
What's Changed
- Modal: Significantly improve animation by @ qwertychouskie in #2805
- Fix memory leak in AnimatedProps constructor by @ c-miles in #2809
- feat(accessibility): add inert to forwardedProps by @ theonetheycallneo in #2773
New Contributors
- @ qwertychouskie made their first contribution in #2805
- @ c-miles made their first contribution in #2809
- @ theonetheycallneo made their first contribution in #2773
Full Changelog: 0.21.1...0.21.2
0.21.1 - 2025-08-20
Full Changelog: 0.21.0...0.21.1
0.21.0 - 2025-07-25
These are fixes but also potentially breaking changes.
- Correctly propagate pointer-events: auto to children of elements using pointerEvents: 'box-none'.
- Update createPortal import from react-dom
Full Changelog: 0.20.0...0.21.0
0.20.0 - 2025-04-03
React 19 support
- [change] React 19 support. Note that findNodeHandle is no longer supported on web.
- [change] Update inline-style-prefixer
Fixes
- [fix] Prevent clipped text from being scrolled by drag
0.19.13 - 2024-10-17
0.19.13
0.19.12 - 2024-05-22
0.19.12
0.19.11 - 2024-04-22
0.19.11
0.19.10 - 2023-12-24
0.19.10
0.19.9 - 2023-09-19
0.19.9
0.19.8 - 2023-08-24
0.19.8
0.19.7 - 2023-07-20
0.19.6 - 2023-06-28
0.19.5 - 2023-06-16
0.19.4 - 2023-04-12
0.19.3 - 2023-04-12
0.19.2 - 2023-04-05
0.19.1 - 2023-03-27
0.19.0 - 2023-03-27
0.18.12 - 2023-01-25
0.18.11 - 2023-01-24
0.18.10 - 2022-11-02
0.18.9 - 2022-08-30
0.18.8 - 2022-08-25
0.18.7 - 2022-07-19
0.18.6 - 2022-07-06
0.18.5 - 2022-07-06
0.18.4 - 2022-07-03
0.18.3 - 2022-07-02
0.18.2 - 2022-06-27
0.18.1 - 2022-06-14
0.18.0 - 2022-06-10
0.17.7 - 2022-03-01
0.17.6 - 2022-02-18
0.17.5 - 2021-09-29
0.17.4 - 2021-09-29
0.17.3 - 2021-09-29
0.17.2 - 2021-09-28
0.17.1 - 2021-06-23

from react-native-web GitHub release notes

Important

Check the changes in this PR to ensure they won't cause issues with your project.
This PR was automatically created by Snyk using the credentials of a real user.
Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

📜 Customise PR templates

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade react-native-web from 0.17.1 to 0.21.2. See this package in npm: react-native-web See this project in Snyk: https://app.snyk.io/org/anis/project/44075102-a0f5-427a-b5a9-bc59074dd426?utm_source=github&utm_medium=referral&page=upgrade-pr

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade react-native-web from 0.17.1 to 0.21.2#630

[Snyk] Upgrade react-native-web from 0.17.1 to 0.21.2#630
github-anis-snoussi wants to merge 1 commit intomainfrom
snyk-upgrade-1502a562ffbb121ab37506794e67a68c

github-anis-snoussi commented Dec 29, 2025

What's Changed

New Contributors

React 19 support

Fixes

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

github-anis-snoussi commented Dec 29, 2025

Snyk has created this PR to upgrade react-native-web from 0.17.1 to 0.21.2.

Issues fixed by the recommended upgrade:

What's Changed

New Contributors

React 19 support

Fixes

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants