We have published new CVEs for React Router (5 moderate, 1 high). These are mostly addressing edge cases from previous reports.
Upgrade to v7.18.0 or v8.3.0 for the most up to date fixes. See the advisories on GitHub for more details:
- React Router v8.1 is available! - create-react-router will now install our official Agent Skill (if you want it) - Instrumentation APIs provides result meta data - Several bug fixes Read the changelog 👇
- React Router v8 is now available! - All v7 future flags are now the default (Middleware, Vite env API, Split Route Modules, etc.) - ESM-only - New baselines: node 22+, React 19+, Vite 7+ - Easy upgrade from v7
- React Router v8 is now in prerelease mode! Please give it a try and let us know if you running into any issues. Learn more by reading the changelog linked below.
- We just published 7 CVEs identifying security vulnerabilities in React Router and Remix v2 We recommend updating to the latest appropriate versions: - React Router v7 -- 7.16.0 - React Router v6 -- 6.30.4 - Remix v2 -- 2.17.5 Details, links, and package ranges are listed below
