CVE-2026-22030

React Router is a router for React. In @remix-run/server-runtime version prior to 2.17.3. and react-router 7.0.0 through 7.11.0, React Router or Remix v2 is vulnerable to CSRF attacks on document POST requests to UI routes when using server-side route action handlers in Framework Mode, or when...

@buttery/tokens (>=0.1.2, <=0.1.10), @common-stack/frontend-stack-react (>=6.0.6-alpha.23, <=10.0.1-alpha.0) +29 more potentially affected by CVE-2026-22030 via @remix-run/server-runtime (>=2.0.0-pre.0, <=2.17.2)

@remix-run/server-runtime NPM version =2.0.0-pre.0, =0.1.2, =6.0.6-alpha.23, =6.0.6-alpha.28, =2.9.1-dario-6, =0.1.0, =5.6.0, =5.13.0, =5.6.0, =5.6.0, =0.0.1-alpha.0, =2.0.0-pre.0, =2.0.0-pre.0, =2.0.0-pre.0, =2.0.0-pre.0, =2.0.0-pre.0, =2.17.2 and more Source cves: CVE-2026-22030 Source advisory...

@buttery/tokens (>=0.1.2, <=0.1.10), @common-stack/frontend-stack-react (>=6.0.6-alpha.23, <=10.0.1-alpha.0) +29 more potentially affected by CVE-2026-22030 via @remix-run/server-runtime (>=2.0.0-pre.0, <=2.17.2)

@remix-run/server-runtime NPM version =2.0.0-pre.0, =0.1.2, =6.0.6-alpha.23, =6.0.6-alpha.28, =2.9.1-dario-6, =0.1.0, =5.6.0, =5.13.0, =5.6.0, =5.6.0, =0.0.1-alpha.0, =2.0.0-pre.0, =2.0.0-pre.0, =2.0.0-pre.0, =2.0.0-pre.0, =2.0.0-pre.0, =2.17.2 and more Source cves: CVE-2026-22030 Source advisory...

@buttery/tokens (>=0.1.2, <=0.1.10), @common-stack/frontend-stack-react (>=6.0.6-alpha.23, <=10.0.1-alpha.0) +29 more potentially affected by CVE-2026-22030 via @remix-run/server-runtime (>=2.0.0-pre.0, <=2.17.2)

@remix-run/server-runtime NPM version =2.0.0-pre.0, =0.1.2, =6.0.6-alpha.23, =6.0.6-alpha.28, =2.9.1-dario-6, =0.1.0, =5.6.0, =5.13.0, =5.6.0, =5.6.0, =0.0.1-alpha.0, =2.0.0-pre.0, =2.0.0-pre.0, =2.0.0-pre.0, =2.0.0-pre.0, =2.0.0-pre.0, =2.17.2 and more Source cves: CVE-2026-22030 Source advisory...

Cross-site Request Forgery (CSRF)

Overview @remix-run/server-runtime is a Server runtime for Remix Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF due to the improper origin checks of UI route submissions in server-side route action handlers in Framework Mode. An attacker can execute unauthoriz...

PT-2026-2138

Name of the Vulnerable Software and Affected Versions react-router versions 7.0.0 through 7.11.0 @remix-run/server-runtime versions prior to 2.17.3 Description React Router, used as a router for React applications, is susceptible to Cross-Site Request Forgery CSRF attacks. This affects document...

EUVD-2023-1019

Malicious code in bioql PyPI...

org.infinispan:infinispan-server-runtime (10.0.0.cr3) potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (10.0.0.cr3)

org.infinispan:infinispan-cli-client MAVEN version 10.0.0.cr3 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-server-runtime 10.0.0.cr3 Source cves: CVE-2025-5731...

org.infinispan:infinispan-server-runtime (10.0.0.final) potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (10.0.0.final)

org.infinispan:infinispan-cli-client MAVEN version 10.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-server-runtime 10.0.0.final Source cves: CVE-2025-5731...

org.infinispan:infinispan-server-runtime (10.0.1.final) potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (10.0.1.final)

org.infinispan:infinispan-cli-client MAVEN version 10.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-server-runtime 10.0.1.final Source cves: CVE-2025-5731...

org.infinispan:infinispan-server-runtime (10.1.0.beta1) potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (10.1.0.beta1)

org.infinispan:infinispan-cli-client MAVEN version 10.1.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-server-runtime 10.1.0.beta1 Source cves: CVE-2025-5731...

org.infinispan:infinispan-server-runtime (10.1.0.cr1) potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (10.1.0.cr1)

org.infinispan:infinispan-cli-client MAVEN version 10.1.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-server-runtime 10.1.0.cr1 Source cves: CVE-2025-5731...

org.infinispan:infinispan-server-runtime (10.1.0.final) potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (10.1.0.final)

org.infinispan:infinispan-cli-client MAVEN version 10.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-server-runtime 10.1.0.final Source cves: CVE-2025-5731...

org.infinispan:infinispan-server-runtime (10.1.1.final) potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (10.1.1.final)

org.infinispan:infinispan-cli-client MAVEN version 10.1.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-server-runtime 10.1.1.final Source cves: CVE-2025-5731...

org.infinispan:infinispan-server-runtime (10.1.2.final) potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (10.1.2.final)

org.infinispan:infinispan-cli-client MAVEN version 10.1.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-server-runtime 10.1.2.final Source cves: CVE-2025-5731...

org.infinispan:infinispan-server-runtime (10.1.3.final) potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (10.1.3.final)

org.infinispan:infinispan-cli-client MAVEN version 10.1.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-server-runtime 10.1.3.final Source cves: CVE-2025-5731...

org.infinispan:infinispan-server-runtime (10.1.5.final), org.infinispan:infinispan-server-testdriver-core (10.1.5.final) +1 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (10.1.5.final)

org.infinispan:infinispan-cli-client MAVEN version 10.1.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-server-runtime 10.1.5.final -...

org.infinispan:infinispan-server-runtime (10.1.6.final), org.infinispan:infinispan-server-testdriver-core (10.1.6.final) +1 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (10.1.6.final)

org.infinispan:infinispan-cli-client MAVEN version 10.1.6.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-server-runtime 10.1.6.final -...

org.infinispan:infinispan-server-runtime (10.1.7.final), org.infinispan:infinispan-server-testdriver-core (10.1.7.final) +1 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (10.1.7.final)

org.infinispan:infinispan-cli-client MAVEN version 10.1.7.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-server-runtime 10.1.7.final -...

org.infinispan:infinispan-server-runtime (10.1.8.final), org.infinispan:infinispan-server-testdriver-core (10.1.8.final) +1 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (10.1.8.final)

org.infinispan:infinispan-cli-client MAVEN version 10.1.8.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-server-runtime 10.1.8.final -...