205 matches found
@buttery/tokens (>=0.1.2, <=0.1.10), @common-stack/frontend-stack-react (>=6.0.6-alpha.23, <=10.0.1-alpha.0) +7 more potentially affected by CVE-2026-21884 via @remix-run/react (>=2.0.0, <=2.17.2)
@remix-run/react NPM version =2.0.0, =0.1.2, =6.0.6-alpha.23, =0.1.0, =5.6.0, =0.0.1-alpha.0, =2.0.0-pre.0, =3.0.0, =0.4.0, =0.11.29 Source cves: CVE-2026-21884 Source advisory: OSV:GHSA-8V8X-CX79-35W7...
@1023-ventures/merope2 (>=0.2.1, <=0.2.9), @1023-ventures/vega-core (>=0.5.0, <=0.6.2) +1396 more potentially affected by CVE-2025-68470 via @remix-run/router (>=1.0.0, <=1.23.0-pre-v6.0)
@remix-run/router NPM version =1.0.0, =0.2.1, =0.5.0, =0.0.1, =0.0.1, =3.0.0, =0.0.0-beta-20260120211922, =1.0.0, =1.0.0, =1.0.0, =2.7.0, =0.0.1, =0.1.0, =0.0.0, =6.24.1, =8.19.1 and more Source cves: CVE-2025-68470 Source advisory: SNYK:JS-REMIXRUNROUTER-14908287...
Open Redirect
Overview @remix-run/router is a Nested/Data-driven/Framework-agnostic Routing Affected versions of this package are vulnerable to Open Redirect via the resolvePath function when used with navigate, , or redirect. An attacker can cause the application to redirect users to external, potentially...
@buttery/tokens (>=0.1.2, <=0.1.10), @common-stack/frontend-stack-react (>=6.0.6-alpha.23, <=10.0.1-alpha.0) +19 more potentially affected by CVE-2025-61686 via @remix-run/node (>=2.0.0, <=2.17.1)
@remix-run/node NPM version =2.0.0, =0.1.2, =6.0.6-alpha.23, =6.0.6-alpha.28, =2.9.1-dario-6, =0.1.0, =5.6.0, =5.13.0, =5.6.0, =5.6.0, =0.0.1-alpha.0, =2.0.0-pre.0, =2.2.0-pre.0, =2.0.0-pre.0, =2.0.0-pre.0, =2.0.0-pre.0, =2.17.1 and more Source cves: CVE-2025-61686 Source advisory:...
GHSA-9583-H5HC-X8CW React Router has Path Traversal in File Session Storage
If applications use createFileSessionStorage from @react-router/node or @remix-run/node/@remix-run/deno in Remix v2 with an unsigned cookie, it is possible for an attacker to cause the session to try to read/write from a location outside the specified session file directory. The success of the...
@buttery/tokens (>=0.1.2, <=0.1.10), @common-stack/frontend-stack-react (>=6.0.6-alpha.23, <=10.0.1-alpha.0) +19 more potentially affected by CVE-2025-61686 via @remix-run/node (>=2.0.0, <=2.17.1)
@remix-run/node NPM version =2.0.0, =0.1.2, =6.0.6-alpha.23, =6.0.6-alpha.28, =2.9.1-dario-6, =0.1.0, =5.6.0, =5.13.0, =5.6.0, =5.6.0, =0.0.1-alpha.0, =2.0.0-pre.0, =2.2.0-pre.0, =2.0.0-pre.0, =2.0.0-pre.0, =2.0.0-pre.0, =2.17.1 and more Source cves: CVE-2025-61686 Source advisory:...
@b42inc/remix-i18n (0.0.1), @briandlee/remix-return-navigation (>=1.0.0-post, <=1.1.0-dev0) +68 more potentially affected by CVE-2025-59057 via @remix-run/react (>=1.15.0, <=2.17.0-pre.1)
@remix-run/react NPM version =1.15.0, =1.0.0-post, =0.1.2, =1.0.0, =6.0.6-alpha.23, =0.0.2-alpha.0, =0.0.1, =0.0.1, =0.1.0, =1.0.0, =0.0.22, =0.0.6, =0.0.1, =5.6.0, =5.28.0 and more Source cves: CVE-2025-59057 Source advisory: OSV:GHSA-3CGP-3XVW-98X8...
@b42inc/remix-i18n (0.0.1), @briandlee/remix-return-navigation (>=1.0.0-post, <=1.1.0-dev0) +68 more potentially affected by CVE-2025-59057 via @remix-run/react (>=1.15.0, <=2.17.0-pre.1)
@remix-run/react NPM version =1.15.0, =1.0.0-post, =0.1.2, =1.0.0, =6.0.6-alpha.23, =0.0.2-alpha.0, =0.0.1, =0.0.1, =0.1.0, =1.0.0, =0.0.22, =0.0.6, =0.0.1, =5.6.0, =5.28.0 and more Source cves: CVE-2025-59057 Source advisory: SNYK:JS-REMIXRUNREACT-14908290...
Cross-site Scripting (XSS)
Overview @remix-run/react is a React DOM bindings for Remix Affected versions of this package are vulnerable to Cross-site Scripting XSS via the Meta API in Framework Mode when generating script:ld+json tags during server-side rendering with untrusted content. An attacker can execute arbitrary...
PT-2026-2120
Name of the Vulnerable Software and Affected Versions @remix-run/react versions prior to 2.17.3 react-router versions 7.0.0 through 7.11.0 Description React Router, a router for React, contains a cross-site scripting XSS issue within the API when operating in Framework Mode during Server-Side...
PT-2026-2137
Name of the Vulnerable Software and Affected Versions React Router versions 7.0.0 through 7.11.0 @remix-run/router versions prior to 1.23.2 Description React Router, a router for React, is susceptible to open redirect issues. Specifically, Single Page Applications SPAs using React Router and Remi...
Insertion of Sensitive Information Into Sent Data
Overview @sentry/remix is an Official Sentry SDK for Remix Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the sendDefaultPii configuration option. An attacker can gain access to sensitive HTTP headers, such as authentication cookies, by...
Malicious code in modiov-kiufni-ufavcseqinsdxaodatayctaban (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d958edfe67c59948d8c1daf1bb4b389164cc1cd5aa7bb633deec15dd24708e3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in joni-tomat88-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3a66d9ad1ecb822842e4922ff9b9d35d7a51405bd1652267784b421a776856f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2008-5370
Malware in sbrugna...
EUVD-2008-4713
Malware in sbrugna...
EUVD-2008-4714
Malware in sbrugna...
EUVD-2008-4712
Malware in sbrugna...