╭ React Router: Open redirect via backslash in <Link> and useNavigate (CVE-2025-68470 bypass)
│ Severity:   moderate
│ Package:    react-router
│ Vulnerable: >=6.0.0 <7.18.0
╰ Info:       https://github.com/advisories/GHSA-wrjc-x8rr-h8h6

╭ React Router: Arbitrary Constructor Injection via deserializeErrors() in React Router SSR Hydration
│ Severity:   moderate
│ Package:    react-router
│ Vulnerable: >=6.4.0 <7.18.0
╰ Info:       https://github.com/advisories/GHSA-337j-9hxr-rhxg

╭ React Router vulnerable to Denial of Service via reflected user input in single-fetch
│ Severity:   high
│ Package:    react-router
│ Vulnerable: >=7.0.0 <7.14.0
╰ Info:       https://github.com/advisories/GHSA-rxv8-25v2-qmq8

╭ React Router's same-origin redirect with path starting // causes open redirect via protocol-relative URL reinterpretation
│ Severity:   moderate
│ Package:    react-router
│ Vulnerable: >=7.0.0 <7.14.1
╰ Info:       https://github.com/advisories/GHSA-2j2x-hqr9-3h42

╭ React Router vulnerable to DoS via unbounded path expansion in __manifest endpoint
│ Severity:   high
│ Package:    react-router
│ Vulnerable: >=7.0.0 <7.15.0
╰ Info:       https://github.com/advisories/GHSA-8x6r-g9mw-2r78

╭ React Router: Unauthenticated Denial of Service via Inefficient Route Matching
│ Severity:   high
│ Package:    react-router
│ Vulnerable: >=7.0.0 <7.18.0
╰ Info:       https://github.com/advisories/GHSA-chx6-hx7r-mcp5

╭ React Router's vendored turbo-stream v2 allows arbitrary constructor invocation via TYPE_ERROR deserialization leading to Unauth RCE
│ Severity:   high
│ Package:    react-router
│ Vulnerable: >=7.0.0 <=7.14.1
╰ Info:       https://github.com/advisories/GHSA-49rj-9fvp-4h2h

╭ React Router: RSCErrorHandler Missing Protocol Validation (XSS)
│ Severity:   moderate
│ Package:    react-router
│ Vulnerable: >=7.11.0 <7.18.0
╰ Info:       https://github.com/advisories/GHSA-h8fp-f39c-q6mh

╭ React Router: Potential CSRF via PUT/PATCH/DELETE document requests
│ Severity:   low
│ Package:    react-router
│ Vulnerable: >=7.12.0 <7.15.1
╰ Info:       https://github.com/advisories/GHSA-84g9-w2xq-vcv6

╭ React Router: RSC Mode CSRF Bypass Allows Action Execution Before 400 Response
│ Severity:   high
│ Package:    react-router
│ Vulnerable: >=7.12.0 <7.18.2
╰ Info:       https://github.com/advisories/GHSA-qwww-vcr4-c8h2

╭ React Router has stored XSS via unescaped Location header in prerendered redirect HTML
│ Severity:   moderate
│ Package:    react-router
│ Vulnerable: >=7.5.1 <7.13.2
╰ Info:       https://github.com/advisories/GHSA-f22v-gfqf-p8f3

╭ React Router vulnerable to XSS in unstable RSC redirect handling via javascript: redirect targets
│ Severity:   high
│ Package:    react-router
│ Vulnerable: >=7.7.0 <7.13.2
╰ Info:       https://github.com/advisories/GHSA-8646-j5j9-6r62

╭ React Router: Open redirect leading to XSS
│ Severity:   moderate
│ Package:    react-router
│ Vulnerable: >=7.9.6 <=7.12.0
╰ Info:       https://github.com/advisories/GHSA-jjmj-jmhj-qwj2

Found 13 vulnerabilities
Severity: 1 low, 6 moderate, 6 high, 0 critical