Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
64 changes: 40 additions & 24 deletions package-lock.json

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

GHSA-qwww-vcr4-c8h2 in react-router - high severity
This is a follow up to CVE-2026-22030 to address related CSRF flows in unstable RSC code paths.

Note

This only affects your application if you are using the unstable RSC APIs

Details

Remediation Aikido suggests bumping this package to version 8.3.0 to resolve this issue

Reply @AikidoSec ignore: [REASON] to ignore this issue.
More info

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion package.json
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@
"jwt-decode": "4.0.0",
"react": "19.0.0",
"react-dom": "19.0.0",
"react-router-dom": "6.26.2",
"react-router-dom": "7.18.2",
"react-toastify": "11.0.2"
},
"devDependencies": {
Expand Down
Loading