Skip to content

React Router Vulnerability #433

Description

@damiangreen

Describe the bug
A clear and concise description of what the bug is.

To Reproduce
Steps to reproduce the behavior:

  1. In any repo containign this latest package run pnpm audit --registry=https://registry.npmjs.org/
  2. See this vulnerability
React Router Vulnerability
CVE/Advisory: GHSA-cpj6-fhp6-mr6j
This is the GitHub Security Advisory page for the vulnerability. You can find:
Full details about the vulnerability
Affected versions: >=7.0 <=7.5.1
Patched versions: >=7.5.2

Mitigated temporarily with

  "pnpm": {
    "overrides": {
      "react-router": ">=7.5.2"
    }
  }
}

Expected behavior
Upgrade dependency

Screenshots
If applicable, add screenshots to help explain your problem.

Desktop (please complete the following information):

  • Ubuntu
  • N/A
  • "beautiful-react-hooks": "^5.0.3",

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions