10xanswers (>=1.1.0 <=1.1.16), 31g-form-parser (=1.0.107) +3393 more potentially affected by CVE-2025-59057 via react-router (>=7.0.0 <=7.9.0-pre.1)

react-router NPM version =7.0.0, =1.1.0, =1.0.0, =0.0.6, =0.0.1, =0.1.0, =3.1.0-beta.1, =1.0.0, =0.0.2, =1.0.0, =1.0.1, =5.0.8 and more Source cves: CVE-2025-59057 Source advisory: SNYK:JS-REACTROUTER-14908289...

React Router has XSS Vulnerability

A XSS vulnerability exists in in React Router's meta/ APIs in Framework Mode when generating script:ld+json tags which could allow arbitrary JavaScript execution during SSR if untrusted content is used to generate the tag. !NOTE This does not impact applications using Declarative Mode or Data Mod...

GHSA-3CGP-3XVW-98X8 React Router has XSS Vulnerability

A XSS vulnerability exists in in React Router's meta/ APIs in Framework Mode when generating script:ld+json tags which could allow arbitrary JavaScript execution during SSR if untrusted content is used to generate the tag. !NOTE This does not impact applications using Declarative Mode or Data Mod...

PT-2026-1810

🟠 React Router, Cross-Site Request Forgery, CVE-2025-47216 Moderate https://t.co/LQdTXi1ca7...

PT-2026-1914

Name of the Vulnerable Software and Affected Versions React Router versions 6.0.0 through 6.30.1 React Router versions 7.0.0 through 7.9.5 Description An attacker-supplied path can be crafted to force a React Router application to perform a navigation or redirect to an external URL. This occurs...

PT-2026-2120

Name of the Vulnerable Software and Affected Versions @remix-run/react versions prior to 2.17.3 react-router versions 7.0.0 through 7.11.0 Description React Router, a router for React, contains a cross-site scripting XSS issue within the API when operating in Framework Mode during Server-Side...

PT-2026-2137

Name of the Vulnerable Software and Affected Versions React Router versions 7.0.0 through 7.11.0 @remix-run/router versions prior to 1.23.2 Description React Router, a router for React, is susceptible to open redirect issues. Specifically, Single Page Applications SPAs using React Router and Remi...

EUVD-2025-205794

Malicious code in shopify-app-react-router npm...

Malicious code in shopify-app-react-router (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d58b68abe183faeee5b24e4b524d982d1c78881c8d0c48dd847411bf8fc087e6 The package shopify-app-react-router was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199226

Malicious code in okta-react-router-6 npm...

MAL-2025-191137 Malicious code in okta-react-router-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b3641ce0ba5810e0edb58d9251065f65ddf54d4a3fca6ef20f36fa46723b741 The package okta-react-router-6 was found to contain malicious code. Source: ghsa-malware...

Malicious code in airbnb-react-router-legacy-v3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64d31fa6c9b6cd0a9e87216ce93110698b49f1fede30d3f090902284a5153613 The package airbnb-react-router-legacy-v3 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190605 Malicious code in airbnb-react-router-legacy-v3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64d31fa6c9b6cd0a9e87216ce93110698b49f1fede30d3f090902284a5153613 The package airbnb-react-router-legacy-v3 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190604 Malicious code in airbnb-react-router-legacy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbad26f42924fe90947efc559b87354b3cc495e2aad542844029ebfe7d0ec3d9 The package airbnb-react-router-legacy was found to contain malicious code. Source: ossf-package-analysis...

EUVD-2025-198541

Malicious code in airbnb-react-router-legacy npm...

Malicious code in airbnb-react-router-legacy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbad26f42924fe90947efc559b87354b3cc495e2aad542844029ebfe7d0ec3d9 The package airbnb-react-router-legacy was found to contain malicious code. Source: ossf-package-analysis...

EUVD-2025-37057

Malicious code in react-router-kitt npm...

MAL-2025-49236 Malicious code in react-router-kitt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70858804bdf3ade0cd049df0f4e4e3dd4f20283636236919ad48cc1ef8fa59f1 The package react-router-kitt was found to contain malicious code...

Malicious code in react-router-kitt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70858804bdf3ade0cd049df0f4e4e3dd4f20283636236919ad48cc1ef8fa59f1 The package react-router-kitt was found to contain malicious code...

PT-2025-44571

Name of the Vulnerable Software and Affected Versions React Router versions 7.0.0 through 7.9.3 @remix-run/deno versions prior to 2.17.2 @remix-run/node versions prior to 2.17.2 Description The issue concerns a path traversal flaw in React Router and Remix when using the createFileSessionStorage...