Skip to content

fix(deps): update dependency react-router to v6.30.2 [security]#1742

Open
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/npm-react-router-vulnerability
Open

fix(deps): update dependency react-router to v6.30.2 [security]#1742
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/npm-react-router-vulnerability

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate bot commented Jan 9, 2026

This PR contains the following updates:

Package Change Age Confidence
react-router (source) 6.29.06.30.2 age confidence

GitHub Vulnerability Alerts

CVE-2025-68470

An attacker-supplied path can be crafted so that when a React Router application navigates to it via navigate(), <Link>, or redirect(), the app performs a navigation/redirect to an external URL. This is only an issue if developers pass untrusted content into navigation paths in their application code.


Release Notes

remix-run/react-router (react-router)

v6.30.2: v6.30.2

Compare Source

See the changelog for release notes: https://github.com/remix-run/react-router/blob/v6/CHANGELOG.md#v6302

v6.30.1: v6.30.1

Compare Source

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v6301

v6.30.0: v6.30.0

Compare Source

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v6300


Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot force-pushed the renovate/npm-react-router-vulnerability branch 2 times, most recently from 77693d7 to 70a2abc Compare January 19, 2026 00:38
@renovate renovate bot force-pushed the renovate/npm-react-router-vulnerability branch from 70a2abc to 9140215 Compare January 20, 2026 14:16
@renovate renovate bot force-pushed the renovate/npm-react-router-vulnerability branch 2 times, most recently from 8193941 to 8d2ecc8 Compare February 9, 2026 00:46
@renovate renovate bot force-pushed the renovate/npm-react-router-vulnerability branch 2 times, most recently from 7ec6450 to 607346d Compare February 17, 2026 14:13
@renovate renovate bot force-pushed the renovate/npm-react-router-vulnerability branch 2 times, most recently from c68049d to 31a790e Compare March 2, 2026 00:52
@renovate renovate bot force-pushed the renovate/npm-react-router-vulnerability branch 2 times, most recently from 572c858 to f623f17 Compare March 9, 2026 00:44
@renovate renovate bot force-pushed the renovate/npm-react-router-vulnerability branch from f623f17 to a2a4cc6 Compare March 16, 2026 00:50
@renovate renovate bot force-pushed the renovate/npm-react-router-vulnerability branch from a2a4cc6 to 996f441 Compare March 23, 2026 00:50
@renovate renovate bot changed the title fix(deps): update dependency react-router to v6.30.2 [security] fix(deps): update dependency react-router to v6.30.2 [security] - autoclosed Mar 27, 2026
@renovate renovate bot closed this Mar 27, 2026
@renovate renovate bot deleted the renovate/npm-react-router-vulnerability branch March 27, 2026 01:33
@renovate renovate bot changed the title fix(deps): update dependency react-router to v6.30.2 [security] - autoclosed fix(deps): update dependency react-router to v6.30.2 [security] Mar 30, 2026
@renovate renovate bot reopened this Mar 30, 2026
@renovate renovate bot force-pushed the renovate/npm-react-router-vulnerability branch 2 times, most recently from 996f441 to ab7eb08 Compare March 30, 2026 18:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants