261 matches found
Cross-site Request Forgery
React Router is vulnerable to Cross-Site Request Forgery CSRF. The vulnerability is due to missing CSRF protections on document POST requests to UI routes, where server-side route action handlers or React Server Actions accept authenticated POST requests without origin validation, allowing...
CVE-2026-22030
React Router is a router for React. In @remix-run/server-runtime version prior to 2.17.3. and react-router 7.0.0 through 7.11.0, React Router or Remix v2 is vulnerable to CSRF attacks on document POST requests to UI routes when using server-side route action handlers in Framework Mode, or when...
CVE-2026-22030 React Router has CSRF issue in Action/Server Action Request Processing
React Router is a router for React. In @remix-run/server-runtime version prior to 2.17.3. and react-router 7.0.0 through 7.11.0, React Router or Remix v2 is vulnerable to CSRF attacks on document POST requests to UI routes when using server-side route action handlers in Framework Mode, or when...
CVE-2026-22030 React Router has CSRF issue in Action/Server Action Request Processing
React Router is a router for React. In @remix-run/server-runtime version prior to 2.17.3. and react-router 7.0.0 through 7.11.0, React Router or Remix v2 is vulnerable to CSRF attacks on document POST requests to UI routes when using server-side route action handlers in Framework Mode, or when...
GHSA-H5CW-625J-3RXH React Router has CSRF issue in Action/Server Action Request Processing
React Router or Remix v2 is vulnerable to CSRF attacks on document POST requests to UI routes when using server-side route action handlers in Framework Mode, or when using React Server Actions in the new unstable RSC modes. !NOTE This does not impact your application if you are using Declarative...
React Router has CSRF issue in Action/Server Action Request Processing
React Router or Remix v2 is vulnerable to CSRF attacks on document POST requests to UI routes when using server-side route action handlers in Framework Mode, or when using React Server Actions in the new unstable RSC modes. !NOTE This does not impact your application if you are using Declarative...
PT-2026-2138
Name of the Vulnerable Software and Affected Versions react-router versions 7.0.0 through 7.11.0 @remix-run/server-runtime versions prior to 2.17.3 Description React Router, used as a router for React applications, is susceptible to Cross-Site Request Forgery CSRF attacks. This affects document...
Exploit for Deserialization of Untrusted Data in Facebook React
React2Shell PoC CVE-2025-55182 A Proof-of-Concept PoC scr...
Exploit for Deserialization of Untrusted Data in Facebook React
Node.js RCE Mitigation: DevOps as the Last Line of Defense Th...
Exploit for Deserialization of Untrusted Data in Facebook React
🚨 NextRce — CVE-2025-55182 Next.js / React Server Components...
Exploit for Deserialization of Untrusted Data in Facebook React
🔍 Next.js RCE Scanner - CVE-2025-55182 & CVE-2025-66478...
Exploit for CVE-2025-55183
React Server Components 취약점 테스트 React Server Components RSC...
Exploit for CVE-2025-66478
CVE-2025-66478 Exploit PoC This repository contains proof-of-...
Exploit for Deserialization of Untrusted Data in Facebook React
Next.Js React Server Components RSC Vulnerabilities This re...
Exploit for Deserialization of Untrusted Data in Facebook React
⚛️ React2Shell Exploit CVE-2025-55182 !Severityhttps://i...
Exploit for Deserialization of Untrusted Data in Facebook React
React2Shell A CLI tool to exploit prototype pollution vulnerab...
Exploit for CVE-2025-55183
React Server Components Security Lab CVE-2025-55183 & CVE-202...
Next Server Actions Source Code Exposure
A vulnerability affects certain React packages for versions 19.0.0, 19.0.1, 19.1.0, 19.1.1, 19.1.2, 19.2.0, and 19.2.1 and frameworks that use the affected packages, including Next.js 15.x and 16.x using the App Router. The issue is tracked upstream as CVE-2025-55183. A malicious HTTP request can...
