LOW3.1npm
GHSA-84g9-w2xq-vcv6· CVE-2026-53663React Router: Potential CSRF via PUT/PATCH/DELETE document requests
Modified: 9/10/2026
package
npm/@remix-run/server-runtime
pkg:npm/%40remix-run/server-runtime
HIGH7.5npm
GHSA-8x6r-g9mw-2r78· CVE-2026-42342React Router vulnerable to DoS via unbounded path expansion in __manifest endpoint
Modified: 9/10/2026
MEDIUM6.5npm
GHSA-h5cw-625j-3rxh· CVE-2026-22030React Router has CSRF issue in Action/Server Action Request Processing
Modified: 9/10/2026