Skip to content

Commit 36bd9ec

Browse files
GeneAIclaude
authored andcommitted
security: Fix React Router XSS vulnerability (CVE-2026-22029)
Update react-router-dom from 6.20.0 to 6.30.3 to patch XSS vulnerability in @remix-run/router (transitive dependency). Security Details: - CVE-2026-22029 (CVSS 8.0 - High) - Vulnerable: @remix-run/router <= 1.23.1 - Fixed: @remix-run/router 1.23.2+ - Affects: Open redirect handlers in Framework/Data modes Changes: - examples/wizard-dashboard/package.json: react-router-dom 6.20.0 → 6.30.3 - examples/wizard-dashboard/package-lock.json: @remix-run/router 1.23.1 → 1.23.2 Resolves: GitHub Security Advisory GHSA-2w69-qvjg-hvjx Co-Authored-By: Claude Sonnet 4.5 <[email protected]>
1 parent 69c8700 commit 36bd9ec

File tree

2 files changed

+14
-14
lines changed

2 files changed

+14
-14
lines changed

examples/wizard-dashboard/package-lock.json

Lines changed: 13 additions & 13 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

examples/wizard-dashboard/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@
1313
"dependencies": {
1414
"react": "^18.2.0",
1515
"react-dom": "^18.2.0",
16-
"react-router-dom": "^6.20.0",
16+
"react-router-dom": "^6.30.3",
1717
"zustand": "^4.4.7",
1818
"@headlessui/react": "^1.7.17",
1919
"framer-motion": "^10.16.16",

0 commit comments

Comments
 (0)