CLSA-2026-1792424737 TuxCare security update for @react-router/dev (1 CVE)

TuxCare rebuilt @react-router/dev to address 1 CVE. Fixed in 7.18.1-tuxcare.1...

CLSA-2026-1792424735 TuxCare security update for @react-router/dev (3 CVEs)

TuxCare rebuilt @react-router/dev to address 3 CVEs. Fixed in 7.5.1-tuxcare.10...

CLSA-2026-1792424734 TuxCare security update for @react-router/dev (1 CVE)

TuxCare rebuilt @react-router/dev to address 1 CVE. Fixed in 7.5.1-tuxcare.9...

CLSA-2026-1792424729 TuxCare security update for @react-router/dev (2 CVEs)

TuxCare rebuilt @react-router/dev to address 2 CVEs. Fixed in 7.5.1-tuxcare.1...

CLSA-2026-1792424733 TuxCare security update for @react-router/dev (1 CVE)

TuxCare rebuilt @react-router/dev to address 1 CVE. Fixed in 7.5.1-tuxcare.8...

CLSA-2026-1792424731 TuxCare security update for @react-router/dev (1 CVE)

TuxCare rebuilt @react-router/dev to address 1 CVE. Fixed in 7.5.1-tuxcare.6...

CLSA-2026-1792424732 TuxCare security update for @react-router/dev (1 CVE)

TuxCare rebuilt @react-router/dev to address 1 CVE. Fixed in 7.5.1-tuxcare.7...

CLSA-2026-1792424730 TuxCare security update for @react-router/dev (3 CVEs)

TuxCare rebuilt @react-router/dev to address 3 CVEs. Fixed in 7.5.1-tuxcare.5...

Cross-site Scripting (XSS)

Overview @react-router/dev is a Dev tools and CLI for React Router Affected versions of this package are vulnerable to Cross-site Scripting XSS due to the improper neutralization of the HTTP Location header value in redirect HTML prerendering when using Framework Mode. An attacker can execute...