`react-router`

Ecosystem:
npm

Package URL:
pkg:npm/react-router

Total PRs:
9,180 Dependabot PRs

Latest PR:
about 2 hours ago

Unique Repositories:
3,922 repositories

Unique Repos (30 days):
230 repositories

Security Advisories

React Router SSR XSS in ScrollRestoration

GHSA-8v8x-cx79-35w7 CVE-2026-21884 HIGH published 5 months ago • updated 6 days ago

A XSS vulnerability exists in in React Router's `<ScrollRestoration>` API in [Framework Mode](https://reactrouter.com/start/modes#framework) when u...

React Router vulnerable to XSS via Open Redirects

GHSA-2w69-qvjg-hvjx CVE-2026-22029 HIGH published 5 months ago • updated 6 days ago

React Router (and Remix v1/v2) SPA open navigation redirects originating from loaders or actions in [Framework Mode](https://reactrouter.com/start/...

React Router has stored XSS via unescaped Location header in prerendered redirect HTML

GHSA-f22v-gfqf-p8f3 CVE-2026-33244 MODERATE published 13 days ago • updated 12 days ago

When using React Router v7 [Framework Mode](https://reactrouter.com/start/modes#framework) with [Pre-rendering](https://reactrouter.com/how-to/pre-...

React Router: Potential CSRF via PUT/PATCH/DELETE document requests

GHSA-84g9-w2xq-vcv6 CVE-2026-53663 LOW published 1 day ago • updated 1 day ago

Certain CSRF checks in React Router v7 [Framework Mode]() were insufficient and run on POST requests, but were bypassed on PUT/PATCH/DELETE request...

React Router has XSS Vulnerability

GHSA-3cgp-3xvw-98x8 CVE-2025-59057 HIGH published 5 months ago • updated 8 days ago

A XSS vulnerability exists in in React Router's `meta()`/`<Meta>` APIs in [Framework Mode](https://reactrouter.com/start/modes#framework) when gene...

View all 14 advisories

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

chore(deps): bump react-router from 7.14.0 to 7.14.1 in the npm-react-dependencies group

reactionable/reactionable #2529

7.14.0 → 7.14.1 Patch PR

Open 2 months ago 2 comments

chore(deps): bump react-router from 7.14.0 to 7.14.1

commercetools/nimbus #1387

7.14.0 → 7.14.1 Patch PR

Open 2 months ago 3 comments

chore(deps): bump the deps group across 1 directory with 5 updates

koekalenteri/koekalenteri #1257

7.14.0 → 7.14.1 Patch PR

Closed 2 months ago 1 comment

chore(deps): bump the npm-minor-patch group across 1 directory with 25 updates

xztxy/openwork #40

7.14.0 → 7.14.1 Patch PR

Open 2 months ago 1 comment

Bump the prod-dependencies group across 1 directory with 6 updates

naturalcrit/homebrewery #4739

7.14.0 → 7.14.1 Patch PR

Closed 2 months ago 1 comment

chore(deps): bump the npm-minor-patch group across 1 directory with 20 updates

xztxy/openwork #39

7.14.0 → 7.14.1 Patch PR

Closed 2 months ago 2 comments

Bump react-router from 7.14.0 to 7.14.1

warmachine028/nike #834

7.14.0 → 7.14.1 Patch PR

Open 2 months ago 1 comment

chore(deps): bump react-router from 7.14.0 to 7.14.1

fazer-ai/bunfire #84

7.14.0 → 7.14.1 Patch PR

Closed 2 months ago 1 comment

Bump react-router from 7.14.0 to 7.14.1 in /oldalbum.web.frontend/src/main/frontend

steinarb/oldalbum #166

7.14.0 → 7.14.1 Patch PR

Open 2 months ago 1 comment

Bump react-router from 7.14.0 to 7.14.1 in /ratatoskr.web.frontend/src/main/frontend

steinarb/ratatoskr #141

7.14.0 → 7.14.1 Patch PR

Open 2 months ago 1 comment

chore(deps): bump the npm-minor-patch group with 4 updates

gitnotifier-labs/ateliermojis #6

7.14.0 → 7.14.1 Patch PR

Closed 2 months ago 2 comments

Bump react-router from 7.14.0 to 7.14.1 in /packages/frontend

skaut/poptavky #2645

7.14.0 → 7.14.1 Patch PR

Closed 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 10 updates

notgautham/Aegis #6

6.30.1 → 6.30.3 Patch PR

Closed 2 months ago 1 comment

build(deps): bump the npm_and_yarn group across 1 directory with 21 updates

huynguyenjv/VN-Law #13

6.30.0 → 6.30.3 Patch PR

Closed 2 months ago 1 comment

Bump the npm_and_yarn group across 2 directories with 2 updates

efaustinoni/AI-GE-Website #2

6.30.1 → 6.30.3 Patch PR

Open 2 months ago 1 comment

OPHJOD-851: Bump the minor-and-patch group across 1 directory with 19 updates

Opetushallitus/jod-urataidot-ui #211

7.13.0 → 7.13.2 Patch PR

Open 2 months ago 1 comment

Bump the npm_and_yarn group across 2 directories with 18 updates

EmilynnJ/soulseer-platform #3

6.30.1 → 6.30.3 Patch PR

Open 2 months ago 5 comments

Bump the npm_and_yarn group across 2 directories with 8 updates

dbourene/Kinjo_V1.6 #2

6.30.1 → 6.30.3 Patch PR

Open 2 months ago 1 comment

Bump the minor-and-patch group across 1 directory with 20 updates

navikt/tilbakemeldinger #164

7.13.1 → 7.13.2 Patch PR

Open 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 7 updates

arv2042-byte/aaravhinditype #2

6.30.1 → 6.30.3 Patch PR

Open 2 months ago 1 comment

Bump the ui group across 1 directory with 39 updates

sigtrap/teleport #3984

7.13.1 → 7.13.2 Patch PR

Open 2 months ago 1 comment

Bump the ui group across 1 directory with 39 updates

soitun/teleport #1298

7.13.1 → 7.13.2 Patch PR

Open 2 months ago 1 comment

build(deps): Bump the npm_and_yarn group across 3 directories with 15 updates

matheus-rech/craft-app-full-71342 #5

6.30.1 → 6.30.3 Patch PR

Open 2 months ago 1 comment

Bump the ci group across 1 directory with 58 updates

mathieu-benoit/deploy-backstage-with-score #375

7.13.1 → 7.13.2 Patch PR

Closed 3 months ago 2 comments

chore(deps): bump the npm-minor-patch group with 21 updates

its-harshit/openplish #14

7.13.1 → 7.13.2 Patch PR

Closed 3 months ago 2 comments

chore(deps): bump the dependencies group across 1 directory with 31 updates

snowdamiz/lit-ui #18

7.13.0 → 7.13.2 Patch PR

Closed 3 months ago 1 comment

OPHJOD-851: Bump the minor-and-patch group across 1 directory with 23 updates

Opetushallitus/jod-ohjaaja-ui #361

7.13.0 → 7.13.2 Patch PR

Open 3 months ago 1 comment

Chore: Bump the all-npm-updates group across 1 directory with 32 updates

Whisparr/Whisparr-Eros #254

7.13.1 → 7.13.2 Patch PR

Closed 3 months ago 1 comment

OPHJOD-851: Bump the minor-and-patch group across 1 directory with 20 updates

Opetushallitus/jod-yksilo-ui #1072

7.13.0 → 7.13.2 Patch PR

Closed 3 months ago 2 comments

Bump the minor-and-patch-dependencies group across 1 directory with 11 updates

navikt/familie-tilbake-frontend #2792

7.13.1 → 7.13.2 Patch PR

Closed 3 months ago 1 comment

Bump the production-dependencies group across 1 directory with 5 updates

egreer/magic.jibbermaster.com #205

7.13.0 → 7.13.2 Patch PR

Closed 3 months ago 1 comment

Bump the ui group across 1 directory with 37 updates

soitun/teleport #1286

7.13.1 → 7.13.2 Patch PR

Open 3 months ago 1 comment

Bump the production-dependencies group across 1 directory with 4 updates

egreer/beermiser.jibbermaster.com #195

7.13.0 → 7.13.2 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump the npm-minor-patch group across 1 directory with 22 updates

anastomotic-ai/anastomotic #16

7.13.1 → 7.13.2 Patch PR

Open 3 months ago 1 comment

Bump the frontend-js group in /frontend with 12 updates

paul-mcj/fodmap_app #55

7.13.1 → 7.13.2 Patch PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 2 directories with 14 updates

ShresthaSailesh/smart-scene-lists #44

6.30.1 → 6.30.3 Patch PR

Open 3 months ago 1 comment

Bump react-router from 7.13.1 to 7.13.2

edgi-govdata-archiving/web-monitoring-ui #1198

7.13.1 → 7.13.2 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump the npm-minor-patch group across 1 directory with 20 updates

xztxy/openwork #31

7.13.1 → 7.13.2 Patch PR

Open 3 months ago 1 comment

chore(deps): bump react-router from 7.13.1 to 7.13.2

the-whiz84/the-whiz.dev #26

7.13.1 → 7.13.2 Patch PR

Open 3 months ago 1 comment

chore(deps): bump the frontend-user-deps group across 1 directory with 17 updates

nemocrk/my-wedding-app #137

7.13.0 → 7.13.2 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump the npm group across 1 directory with 10 updates

Screenly/Anthias #2723

7.13.1 → 7.13.2 Patch PR

Open 3 months ago 1 comment

chore(deps): bump the npm-pos-minor group in /apps/pos-terminal with 10 updates

akaitigo/open-pos #1096

7.13.1 → 7.13.2 Patch PR

Closed 3 months ago 2 comments

OPHJOD-851: Bump the minor-and-patch group across 1 directory with 22 updates

Opetushallitus/jod-ohjaaja-ui #360

7.13.0 → 7.13.2 Patch PR

Open 3 months ago 1 comment

OPHJOD-851: Bump the minor-and-patch group across 1 directory with 19 updates

Opetushallitus/jod-yksilo-ui #1066

7.13.0 → 7.13.2 Patch PR

Open 3 months ago 1 comment

chore(deps): bump the dependencies group across 1 directory with 17 updates

netsvetoch/template-spa-react #126

7.13.0 → 7.13.2 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump the minor-and-patch group across 1 directory with 25 updates

xavisavvy/scrum-monsters #93

7.13.0 → 7.13.2 Patch PR

Closed 3 months ago 5 comments

Bump react-router from 7.13.0 to 7.13.2

navikt/k9-sak-web #8511

7.13.0 → 7.13.2 Patch PR

Open 3 months ago 14 comments

chore(deps): bump react-router from 7.13.1 to 7.13.2

caponetto/personal-webapp #206

7.13.1 → 7.13.2 Patch PR

Closed 3 months ago 2 comments

Bump the patch-minor group across 1 directory with 31 updates

frontvibe/fluid #612

7.13.1 → 7.13.2 Patch PR

Open 3 months ago 1 comment

chore(deps): bump react-router from 7.13.1 to 7.13.2

JoeRegnier/retiree-plan #59

7.13.1 → 7.13.2 Patch PR

Closed 3 months ago 1 comment

Package Details

Name:	`react-router`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/react-router`
JSON API:	View JSON

Security Advisories

14

Active advisories

HIGH 9

MODERATE 4

LOW 1

View All npm Advisories

Package Information

Description:

Declarative routing for React

Repository:	https://github.com/remix-run/react-router
Homepage:	https://github.com/remix-run/react-router
Latest Release:	`7.0.1` over 1 year ago
Dependent Repos:	1,472,795
Dependent Packages:	10,588
Downloads:	47,668,165
Ranking:	Top 0.0241% by dependent repos Top 0.0372% by downloads Top 0.0093% by dependent pkgs

PR Status

Open 4,101 (44.8%)

Merged 1,176 (12.8%)

Closed 3,105 (33.9%)

PR Types

Major 822 (9.0%)

Minor 5,234 (57.1%)

Patch 2,163 (23.6%)

Removal 145 (1.6%)