AIKIDO-2025-10637
react-native-exponea-sdk is vulnerable to Improper Export of Android Application Components
60
Medium Risk
This Affects:
react-native-exponea-sdkTL;DR
Affected versions of this package set the android:exported attribute to true for certain components in the AndroidManifest.xml file. This setting allows those components (such as activities, services, or broadcast receivers) to be invoked by external applications. If not properly restricted, this configuration can increase the risk of unauthorized access, privilege escalation, or unintended data exposure.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
react-native-exponea-sdk is vulnerable to Improper Export of Android Application Components in versions 0.0.1 - 2.2.0.
How to fix this
Upgrade the react-native-exponea-sdk library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
SOC 2Compliant
ISO 27001Compliant