@react-router/node vulnerabilities (TuxCare)
8 vulnerabilities.
-
@react-router/nodeTuxCare React Router: Unauthenticated Denial of Service via Inefficient Route Matching 8.7 High -
@react-router/nodeTuxCare React Router vulnerable to DoS via unbounded path expansion in __manifest endpoint 7.5 High -
@react-router/nodeTuxCare React Router's vendored turbo-stream v2 allows arbitrary constructor invocation via TYPE_ERROR deserialization leading to Unauth RCE 8.1 High -
@react-router/nodeTuxCare React Router's same-origin redirect with path starting // causes open redirect via protocol-relative URL reinterpretation 6.6 Medium -
@react-router/nodeTuxCare React Router SSR XSS in ScrollRestoration 8.2 High -
@react-router/nodeTuxCare React Router has Path Traversal in File Session Storage 9.1 Critical -
@react-router/nodeTuxCare React Router allows pre-render data spoofing on React-Router framework mode 8.2 High -
@react-router/nodeTuxCare React Router allows a DoS via cache poisoning by forcing SPA mode 7.5 High