20 matches found
CLSA-2026-1792161542 TuxCare security update for @remix-run/server-runtime (3 CVEs)
TuxCare rebuilt @remix-run/server-runtime to address 3 CVEs. Fixed in 1.19.3-tuxcare.4...
CLSA-2026-1792161540 TuxCare security update for @remix-run/server-runtime (1 CVE)
TuxCare rebuilt @remix-run/server-runtime to address 1 CVE. Fixed in 1.19.3-tuxcare.1...
CLSA-2026-1792161539 TuxCare security update for @remix-run/server-runtime (4 CVEs)
TuxCare rebuilt @remix-run/server-runtime to address 4 CVEs. Fixed in 2.17.0-tuxcare.1...
CLSA-2026-1792160940 TuxCare security update for @remix-run/server-runtime (1 CVE)
TuxCare rebuilt @remix-run/server-runtime to address 1 CVE. Fixed in 2.17.0-tuxcare.2...
PT-2026-124121
TuxCare rebuilt @remix-run/server-runtime to address 1 CVE. Fixed in 1.19.3-tuxcare.1...
PT-2026-124122
TuxCare rebuilt @remix-run/server-runtime to address 3 CVEs. Fixed in 1.19.3-tuxcare.4...
PT-2026-123675
TuxCare rebuilt @remix-run/server-runtime to address 1 CVE. Fixed in 2.17.0-tuxcare.2...
PT-2026-124120
TuxCare rebuilt @remix-run/server-runtime to address 4 CVEs. Fixed in 2.17.0-tuxcare.1...
@remix-run/architect (>=2.17.3, <=2.17.4), @remix-run/cloudflare (>=2.17.3, <=2.17.4) +10 more potentially affected by CVE-2026-53663 via @remix-run/server-runtime (>=2.17.3, <=2.17.4)
@remix-run/server-runtime NPM version =2.17.3, =2.17.3, =2.17.3, =2.17.3, =2.17.3, =2.17.3, =2.17.3, =2.17.3, =2.17.3, =2.17.3, =2.17.3, =2.17.3, =0.11.30, =0.12.30 Source cves: CVE-2026-53663 Source advisory: MEND:CVE-2026-53663...
@remix-run/architect (>=2.17.3, <=2.17.4), @remix-run/cloudflare (>=2.17.3, <=2.17.4) +10 more potentially affected by CVE-2026-53663 via @remix-run/server-runtime (>=2.17.3, <=2.17.4)
@remix-run/server-runtime NPM version =2.17.3, =2.17.3, =2.17.3, =2.17.3, =2.17.3, =2.17.3, =2.17.3, =2.17.3, =2.17.3, =2.17.3, =2.17.3, =2.17.3, =0.11.30, =0.12.30 Source cves: CVE-2026-53663 Source advisory: GHSA-84G9-W2XQ-VCV6...
@remix-run/architect (>=2.17.3, <=2.17.4), @remix-run/cloudflare (>=2.17.3, <=2.17.4) +10 more potentially affected by CVE-2026-53663 via @remix-run/server-runtime (>=2.17.3, <=2.17.4)
@remix-run/server-runtime NPM version =2.17.3, =2.17.3, =2.17.3, =2.17.3, =2.17.3, =2.17.3, =2.17.3, =2.17.3, =2.17.3, =2.17.3, =2.17.3, =2.17.3, =0.11.30, =0.12.30 Source cves: CVE-2026-53663 Source advisory: SNYK:JS-REMIXRUNSERVERRUNTIME-17342509...
@buttery/tokens (>=0.1.2, <=0.1.10), @common-stack/frontend-stack-react (>=6.0.6-alpha.23, <=10.0.1-alpha.0) +25 more potentially affected by CVE-2026-42342 via @remix-run/server-runtime (>=2.10.0, <=2.17.4)
@remix-run/server-runtime NPM version =2.10.0, =0.1.2, =6.0.6-alpha.23, =6.0.6-alpha.28, =0.1.0, =5.6.0, =5.13.0, =5.6.0, =5.6.0, =0.1.36, =2.10.0, =2.10.0, =2.10.0, =2.10.0, =2.10.0, =2.10.0, =2.17.4 and more Source cves: CVE-2026-42342 Source advisory: GHSA-8X6R-G9MW-2R78...
@buttery/tokens (>=0.1.2, <=0.1.10), @common-stack/frontend-stack-react (>=6.0.6-alpha.23, <=10.0.1-alpha.0) +25 more potentially affected by CVE-2026-42342 via @remix-run/server-runtime (>=2.10.0, <=2.17.4)
@remix-run/server-runtime NPM version =2.10.0, =0.1.2, =6.0.6-alpha.23, =6.0.6-alpha.28, =0.1.0, =5.6.0, =5.13.0, =5.6.0, =5.6.0, =0.1.36, =2.10.0, =2.10.0, =2.10.0, =2.10.0, =2.10.0, =2.10.0, =2.17.4 and more Source cves: CVE-2026-42342 Source advisory: MEND:CVE-2026-42342...
CVE-2026-42342
React Router is a router for React. In versions 7.0.0 through 7.14.x of react-router and versions 2.10.0 through 2.17.4 of @remix-run/server-runtime, certain crafted requests can consume disproportionate server resources via unbounded path expansion in the manifest endpoint, resulting in response...
CVE-2026-42342: Uncontrolled Resource Consumption
React Router is a router for React. In versions 7.0.0 through 7.14.x of react-router and versions 2.10.0 through 2.17.4 of @remix-run/server-runtime, certain crafted requests can consume disproportionate server resources via unbounded path expansion in the manifest endpoint, resulting in response...
@alola-react/app-tools (0.0.1), @alola-react/plugin-data-loader (0.0.1) +212 more potentially affected by CVE-2026-22030 via @remix-run/server-runtime (>=0.0.0-experimental-a04f3d18, <=2.17.2)
@remix-run/server-runtime NPM version =0.0.0-experimental-a04f3d18, =1.0.0, =0.1.0-RC.0, =1.0.0, =0.0.6, =0.1.2, =0.0.1, =1.0.0, =6.0.6-alpha.23, =10.0.1-alpha.0 and more Source cves: CVE-2026-22030 Source advisory: MEND:CVE-2026-22030...
CVE-2026-22030
React Router is a router for React. In @remix-run/server-runtime version prior to 2.17.3. and react-router 7.0.0 through 7.11.0, React Router or Remix v2 is vulnerable to CSRF attacks on document POST requests to UI routes when using server-side route action handlers in Framework Mode, or when...
@buttery/tokens (>=0.1.2, <=0.1.10), @common-stack/frontend-stack-react (>=6.0.6-alpha.23, <=10.0.1-alpha.0) +29 more potentially affected by CVE-2026-22030 via @remix-run/server-runtime (>=2.0.0-pre.0, <=2.17.2)
@remix-run/server-runtime NPM version =2.0.0-pre.0, =0.1.2, =6.0.6-alpha.23, =6.0.6-alpha.28, =2.9.1-dario-6, =0.1.0, =5.6.0, =5.13.0, =5.6.0, =5.6.0, =0.0.1-alpha.0, =2.0.0-pre.0, =2.0.0-pre.0, =2.0.0-pre.0, =2.0.0-pre.0, =2.0.0-pre.0, =2.17.2 and more Source cves: CVE-2026-22030 Source advisory...
@buttery/tokens (>=0.1.2, <=0.1.10), @common-stack/frontend-stack-react (>=6.0.6-alpha.23, <=10.0.1-alpha.0) +29 more potentially affected by CVE-2026-22030 via @remix-run/server-runtime (>=2.0.0-pre.0, <=2.17.2)
@remix-run/server-runtime NPM version =2.0.0-pre.0, =0.1.2, =6.0.6-alpha.23, =6.0.6-alpha.28, =2.9.1-dario-6, =0.1.0, =5.6.0, =5.13.0, =5.6.0, =5.6.0, =0.0.1-alpha.0, =2.0.0-pre.0, =2.0.0-pre.0, =2.0.0-pre.0, =2.0.0-pre.0, =2.0.0-pre.0, =2.17.2 and more Source cves: CVE-2026-22030 Source advisory...
@buttery/tokens (>=0.1.2, <=0.1.10), @common-stack/frontend-stack-react (>=6.0.6-alpha.23, <=10.0.1-alpha.0) +29 more potentially affected by CVE-2026-22030 via @remix-run/server-runtime (>=2.0.0-pre.0, <=2.17.2)
@remix-run/server-runtime NPM version =2.0.0-pre.0, =0.1.2, =6.0.6-alpha.23, =6.0.6-alpha.28, =2.9.1-dario-6, =0.1.0, =5.6.0, =5.13.0, =5.6.0, =5.6.0, =0.0.1-alpha.0, =2.0.0-pre.0, =2.0.0-pre.0, =2.0.0-pre.0, =2.0.0-pre.0, =2.0.0-pre.0, =2.17.2 and more Source cves: CVE-2026-22030 Source advisory...