An open index of dependabot pull requests across open source projects.

react-router

Ecosystem:
npm
Package URL:
pkg:npm/react-router
Total PRs:
9,124 Dependabot PRs
Latest PR:
about 13 hours ago
Unique Repositories:
3,882 repositories
Unique Repos (30 days):
216 repositories
Security Advisories
React Router vulnerable to XSS via Open Redirects
GHSA-2w69-qvjg-hvjx CVE-2026-22029 HIGH published 5 months ago • updated about 13 hours ago
React Router (and Remix v1/v2) SPA open navigation redirects originating from loaders or actions in [Framework Mode](https://reactrouter.com/start/...
React Router has stored XSS via unescaped Location header in prerendered redirect HTML
GHSA-f22v-gfqf-p8f3 CVE-2026-33244 MODERATE published 7 days ago • updated 5 days ago
When using React Router v7 [Framework Mode](https://reactrouter.com/start/modes#framework) with [Pre-rendering](https://reactrouter.com/how-to/pre-...
React Router has XSS Vulnerability
GHSA-3cgp-3xvw-98x8 CVE-2025-59057 HIGH published 5 months ago • updated 1 day ago
A XSS vulnerability exists in in React Router's `meta()`/`<Meta>` APIs in [Framework Mode](https://reactrouter.com/start/modes#framework) when gene...
React Router allows pre-render data spoofing on React-Router framework mode
GHSA-cpj6-fhp6-mr6j CVE-2025-43865 HIGH published about 1 year ago • updated 6 days ago
## Summary After some research, it turns out that it's possible to modify pre-rendered data by adding a header to the request. This allows to compl...
React Router vulnerable to DoS via unbounded path expansion in __manifest endpoint
GHSA-8x6r-g9mw-2r78 CVE-2026-42342 HIGH published 7 days ago • updated 1 day ago
There exists a potential DOS attack vector in React Router Framework Mode applications (as well as Remix v2.10.0 - 2.17.4). Certain requests can b...
Recent PRs (filtered by: Patch PRs )
Package Details
Name: react-router
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/react-router
JSON API: View JSON
Security Advisories

13

Active advisories
HIGH 9
MODERATE 4
View All npm Advisories
Package Information
Description:

Declarative routing for React

Repository: https://github.com/remix-run/react-router
Homepage: https://github.com/remix-run/react-router
Latest Release: 7.0.1
over 1 year ago
Dependent Repos: 1,472,795
Dependent Packages: 10,588
Downloads: 47,668,165
Ranking: Top 0.0241% by dependent repos Top 0.0372% by downloads Top 0.0093% by dependent pkgs
PR Status
Open 4,082 (44.7%)
Merged 1,176 (12.9%)
Closed 3,083 (33.8%)
PR Types
Major 817 (9.0%)
Minor 5,204 (57.0%)
Patch 2,157 (23.6%)
Removal 145 (1.6%)