Skip to content

[Snyk] Security upgrade react-native from 0.42.3 to 0.69.12#22

Open
annaduh wants to merge 1 commit intomasterfrom
snyk-fix-4e8d5794de4db9e35da369ece601f692
Open

[Snyk] Security upgrade react-native from 0.42.3 to 0.69.12#22
annaduh wants to merge 1 commit intomasterfrom
snyk-fix-4e8d5794de4db9e35da369ece601f692

Conversation

@annaduh
Copy link

@annaduh annaduh commented Jul 20, 2025

snyk-top-banner

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

  • examples/SampleRN42/package.json

Vulnerabilities that will be fixed with an upgrade:

Issue Score
critical severity Predictable Value Range from Previous Values
SNYK-JS-FORMDATA-10841150
  251  

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

Copy link

@cursor cursor bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Bug: React Native 0.69.12 Upgrade Issues

The upgrade to React Native 0.69.12 introduces multiple incompatibilities:

  • Dependency Mismatch: React Native 0.69.12 requires React 18.x, but the package.json specifies React 15.4.2. This version mismatch will cause build failures, compilation errors, and runtime issues.
  • Deprecated Start Script: The start script uses the removed node_modules/react-native/local-cli/cli.js path, which was deprecated in React Native 0.69.12. This will cause the start command to fail.
  • Deprecated Postinstall Script: The postinstall script uses react-native link, which is deprecated in React Native 0.60+ due to autolinking and may cause conflicts.

examples/SampleRN42/package.json#L5-L12

"scripts": {
"start": "node node_modules/react-native/local-cli/cli.js start",
"postinstall": "react-native link",
"test": "jest"
},
"dependencies": {
"react": "15.4.2",
"react-native": "0.69.12",

Fix in CursorFix in Web


Was this report helpful? Give feedback by reacting with 👍 or 👎

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants