An open index of dependabot pull requests across open source projects.

react-router

Ecosystem:
npm
Package URL:
pkg:npm/react-router
Total PRs:
9,129 Dependabot PRs
Latest PR:
about 14 hours ago
Unique Repositories:
3,885 repositories
Unique Repos (30 days):
209 repositories
Security Advisories
React Router SSR XSS in ScrollRestoration
GHSA-8v8x-cx79-35w7 CVE-2026-21884 HIGH published 5 months ago • updated 1 day ago
A XSS vulnerability exists in in React Router's `<ScrollRestoration>` API in [Framework Mode](https://reactrouter.com/start/modes#framework) when u...
React Router vulnerable to XSS via Open Redirects
GHSA-2w69-qvjg-hvjx CVE-2026-22029 HIGH published 5 months ago • updated 1 day ago
React Router (and Remix v1/v2) SPA open navigation redirects originating from loaders or actions in [Framework Mode](https://reactrouter.com/start/...
React Router has stored XSS via unescaped Location header in prerendered redirect HTML
GHSA-f22v-gfqf-p8f3 CVE-2026-33244 MODERATE published 8 days ago • updated 7 days ago
When using React Router v7 [Framework Mode](https://reactrouter.com/start/modes#framework) with [Pre-rendering](https://reactrouter.com/how-to/pre-...
React Router has XSS Vulnerability
GHSA-3cgp-3xvw-98x8 CVE-2025-59057 HIGH published 5 months ago • updated 3 days ago
A XSS vulnerability exists in in React Router's `meta()`/`<Meta>` APIs in [Framework Mode](https://reactrouter.com/start/modes#framework) when gene...
React Router allows pre-render data spoofing on React-Router framework mode
GHSA-cpj6-fhp6-mr6j CVE-2025-43865 HIGH published about 1 year ago • updated 8 days ago
## Summary After some research, it turns out that it's possible to modify pre-rendered data by adding a header to the request. This allows to compl...
Recent PRs (filtered by: Open , Patch PRs )
Bump the react-router group with 4 updates

kei10in/takaneko #409

7.14.0 → 7.14.1 Patch PR
Open about 2 months ago 1 comment
kei10in
Bump react-router from 7.14.0 to 7.14.1

warmachine028/nike #834

7.14.0 → 7.14.1 Patch PR
Open about 2 months ago 1 comment
warmachine028
Package Details
Name: react-router
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/react-router
JSON API: View JSON
Security Advisories

13

Active advisories
HIGH 9
MODERATE 4
View All npm Advisories
Package Information
Description:

Declarative routing for React

Repository: https://github.com/remix-run/react-router
Homepage: https://github.com/remix-run/react-router
Latest Release: 7.0.1
over 1 year ago
Dependent Repos: 1,472,795
Dependent Packages: 10,588
Downloads: 47,668,165
Ranking: Top 0.0241% by dependent repos Top 0.0372% by downloads Top 0.0093% by dependent pkgs
PR Status
Open 4,084 (44.7%)
Merged 1,176 (12.9%)
Closed 3,087 (33.8%)
PR Types
Major 818 (9.0%)
Minor 5,207 (57.0%)
Patch 2,159 (23.6%)
Removal 145 (1.6%)