From 30c9a00069948f80b29c22101437760e488261ef Mon Sep 17 00:00:00 2001
From: MelvinBot <infra+melvinbot@expensify.com>
Date: Mon, 26 Oct 2026 13:37:39 +0000
Subject: [PATCH] Override RN CLI doctor/hermes to 11.4.1 to drop vulnerable ip
 package

---
 package-lock.json | 48 +++++++++++++++++++++++++----------------------
 package.json      | 14 ++++++++++++++
 2 files changed, 40 insertions(+), 22 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index a01c2d1..292dfe9 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -2719,25 +2719,24 @@
             }
         },
         "node_modules/@react-native-community/cli-doctor": {
-            "version": "11.3.5",
-            "resolved": "https://registry.npmjs.org/@react-native-community/cli-doctor/-/cli-doctor-11.3.5.tgz",
-            "integrity": "sha512-+4BuFHjoV4FFjX5y60l0s6nS0agidb1izTVwsFixeFKW73LUkOLu+Ae5HI94RAFEPE4ePEVNgYX3FynIau6K0g==",
+            "version": "11.4.1",
+            "resolved": "https://registry.npmjs.org/@react-native-community/cli-doctor/-/cli-doctor-11.4.1.tgz",
+            "integrity": "sha512-O6oPiRsl8pdkcyNktpzvJAXUqdocoY4jh7Tt7wA69B1JKCJA7aPCecwJgpUZb63ZYoxOtRtYM3BYQKzRMLIuUw==",
             "peer": true,
             "dependencies": {
-                "@react-native-community/cli-config": "11.3.5",
-                "@react-native-community/cli-platform-android": "11.3.5",
-                "@react-native-community/cli-platform-ios": "11.3.5",
-                "@react-native-community/cli-tools": "11.3.5",
+                "@react-native-community/cli-config": "11.4.1",
+                "@react-native-community/cli-platform-android": "11.4.1",
+                "@react-native-community/cli-platform-ios": "11.4.1",
+                "@react-native-community/cli-tools": "11.4.1",
                 "chalk": "^4.1.2",
                 "command-exists": "^1.2.8",
                 "envinfo": "^7.7.2",
                 "execa": "^5.0.0",
                 "hermes-profile-transformer": "^0.0.6",
-                "ip": "^1.1.5",
                 "node-stream-zip": "^1.9.1",
                 "ora": "^5.4.1",
                 "prompts": "^2.4.0",
-                "semver": "^6.3.0",
+                "semver": "^7.5.2",
                 "strip-ansi": "^5.2.0",
                 "sudo-prompt": "^9.0.0",
                 "wcwidth": "^1.0.1",
@@ -2753,6 +2752,18 @@
                 "node": ">=6"
             }
         },
+        "node_modules/@react-native-community/cli-doctor/node_modules/semver": {
+            "version": "7.8.5",
+            "resolved": "https://registry.npmjs.org/semver/-/semver-7.8.5.tgz",
+            "integrity": "sha512-Y7/KDsb8LjooZpwaqGyulO6DQlksgCncchHGk+sZIY4SBvUocMBEFH5Ur1fI4dV+Jvl0w6cjvucaIi40puRioA==",
+            "peer": true,
+            "bin": {
+                "semver": "bin/semver.js"
+            },
+            "engines": {
+                "node": ">=10"
+            }
+        },
         "node_modules/@react-native-community/cli-doctor/node_modules/strip-ansi": {
             "version": "5.2.0",
             "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-5.2.0.tgz",
@@ -2766,16 +2777,15 @@
             }
         },
         "node_modules/@react-native-community/cli-hermes": {
-            "version": "11.3.5",
-            "resolved": "https://registry.npmjs.org/@react-native-community/cli-hermes/-/cli-hermes-11.3.5.tgz",
-            "integrity": "sha512-+3m34hiaJpFel8BlJE7kJOaPzWR/8U8APZG2LXojbAdBAg99EGmQcwXIgsSVJFvH8h/nezf4DHbsPKigIe33zA==",
+            "version": "11.4.1",
+            "resolved": "https://registry.npmjs.org/@react-native-community/cli-hermes/-/cli-hermes-11.4.1.tgz",
+            "integrity": "sha512-1VAjwcmv+i9BJTMMVn5Grw7AcgURhTyfHVghJ1YgBE2euEJxPuqPKSxP54wBOQKnWUwsuDQAtQf+jPJoCxJSSA==",
             "peer": true,
             "dependencies": {
-                "@react-native-community/cli-platform-android": "11.3.5",
-                "@react-native-community/cli-tools": "11.3.5",
+                "@react-native-community/cli-platform-android": "11.4.1",
+                "@react-native-community/cli-tools": "11.4.1",
                 "chalk": "^4.1.2",
-                "hermes-profile-transformer": "^0.0.6",
-                "ip": "^1.1.5"
+                "hermes-profile-transformer": "^0.0.6"
             }
         },
         "node_modules/@react-native-community/cli-platform-android": {
@@ -6397,12 +6407,6 @@
                 "loose-envify": "^1.0.0"
             }
         },
-        "node_modules/ip": {
-            "version": "1.1.8",
-            "resolved": "https://registry.npmjs.org/ip/-/ip-1.1.8.tgz",
-            "integrity": "sha512-PuExPYUiu6qMBQb4l06ecm6T6ujzhmh+MeJcW9wa89PoAz5pvd4zPgN5WJV104mb6S2T1AwNIAaB70JNrLQWhg==",
-            "peer": true
-        },
         "node_modules/is-array-buffer": {
             "version": "3.0.2",
             "resolved": "https://registry.npmjs.org/is-array-buffer/-/is-array-buffer-3.0.2.tgz",
diff --git a/package.json b/package.json
index 889b315..d17c1f6 100644
--- a/package.json
+++ b/package.json
@@ -68,5 +68,19 @@
         "eslint-plugin-react-hooks": "^4.6.0",
         "prettier": "^3.0.0",
         "typescript": "^5.1.6"
+    },
+    "overrides": {
+        "@react-native-community/cli-doctor": {
+            ".": "11.4.1",
+            "@react-native-community/cli-config": "11.3.5",
+            "@react-native-community/cli-platform-android": "11.3.5",
+            "@react-native-community/cli-platform-ios": "11.3.5",
+            "@react-native-community/cli-tools": "11.3.5"
+        },
+        "@react-native-community/cli-hermes": {
+            ".": "11.4.1",
+            "@react-native-community/cli-platform-android": "11.3.5",
+            "@react-native-community/cli-tools": "11.3.5"
+        }
     }
 }