CVE-2026-55685
1 advisory.
npm/react-router CVE-2026-55685: high
React Router: Unauthenticated Denial of Service via Inefficient Route Matching
Action: Upgrade react-router to 7.18.0 or later.
npm i react-router@7.18.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 7.0.0 | 7.18.0 | - |
Fixed versions
| 7.18.0 |
Sources
- osv: GHSA-chx6-hx7r-mcp5
- https://github.com/remix-run/react-router/security/advisories/GHSA-chx6-hx7r-mcp5
- https://github.com/remix-run/react-router/pull/15186
- https://github.com/remix-run/react-router/commit/09e6020d1950e54f361f7ad00938ecd4dde60929
- https://github.com/remix-run/react-router
- https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7180
- https://github.com/remix-run/react-router/releases/tag/react-router@7.18.0
CVE-2026-55685 · published · modified · JSON