#3383·emotion

[@emotion/react] React-is vulnerability

Author: BAISTMCreated Jun 8, 2026Updated Jun 8, 2026
Labelsbugneeds triage

@emotion/react depends on hoist-non-react-statics, which requires react-is@^16.7.0.

This causes react-is to be installed, and it is flagged as vulnerable. Since hoist-non-react-statics has not been updated since 2020, please consider replacing this dependency or inlining the required functionalities.