OsVault/npm/react-router
npm

react-router

12 known vulnerabilities · 0 critical · 0 high

CVE-2026-22029

React Router vulnerable to XSS via Open Redirects

Published Jan 8, 2026
CVE-2025-59057

React Router has XSS Vulnerability

Published Jan 8, 2026
CVE-2026-21884

React Router SSR XSS in ScrollRestoration

Published Jan 8, 2026
CVE-2025-68470

React Router has unexpected external redirect via untrusted paths

Published Jan 8, 2026
CVE-2025-43865

React Router allows pre-render data spoofing on React-Router framework mode

Published Apr 24, 2025
CVE-2026-22030

React Router has CSRF issue in Action/Server Action Request Processing

Published Jan 8, 2026
MAL-2026-2978

Malicious code in @oec-settlement/react-router (npm)

Published Apr 22, 2026
MAL-2026-1838

Malicious code in react-router-on-navigation (npm)

Published Mar 18, 2026
MAL-2023-733

Malicious code in react-router-packages (npm)

Published Jun 13, 2023
MAL-2025-191137

Malicious code in okta-react-router-6 (npm)

Published Nov 24, 2025
MAL-2025-192977

Malicious code in shopify-app-react-router (npm)

Published Dec 30, 2025
MAL-2024-9004

Malicious code in meraki-react-router (npm)

Published Sep 27, 2024
Check your entire dependency tree at onceRun dependency scan →