5 matches found
CLSA-2026-1792424734 TuxCare security update for @react-router/dev (1 CVE)
TuxCare rebuilt @react-router/dev to address 1 CVE. Fixed in 7.5.1-tuxcare.9...
CLSA-2026-1792424733 TuxCare security update for @react-router/dev (1 CVE)
TuxCare rebuilt @react-router/dev to address 1 CVE. Fixed in 7.5.1-tuxcare.8...
CLSA-2026-1792424731 TuxCare security update for @react-router/dev (1 CVE)
TuxCare rebuilt @react-router/dev to address 1 CVE. Fixed in 7.5.1-tuxcare.6...
CLSA-2026-1792424730 TuxCare security update for @react-router/dev (3 CVEs)
TuxCare rebuilt @react-router/dev to address 3 CVEs. Fixed in 7.5.1-tuxcare.5...
Cross-site Scripting (XSS)
Overview @react-router/dev is a Dev tools and CLI for React Router Affected versions of this package are vulnerable to Cross-site Scripting XSS due to the improper neutralization of the HTTP Location header value in redirect HTML prerendering when using Framework Mode. An attacker can execute...