@react-router/remix-routes-option-adapter vulnerabilities (TuxCare)
10 vulnerabilities.
@react-router/remix-routes-option-adapterTuxCareReact Router: Unauthenticated Denial of Service via Inefficient Route Matching8.7 High@react-router/remix-routes-option-adapterTuxCareReact Router: Open redirect via backslash in <Link> and useNavigate (CVE-2025-68470 bypass)5.1 Medium@react-router/remix-routes-option-adapterTuxCareReact Router: Arbitrary Constructor Injection via deserializeErrors() in React Router SSR Hydration6.1 Medium@react-router/remix-routes-option-adapterTuxCareReact Router vulnerable to DoS via unbounded path expansion in __manifest endpoint7.5 High@react-router/remix-routes-option-adapterTuxCareReact Router's vendored turbo-stream v2 allows arbitrary constructor invocation via TYPE_ERROR deserialization leading to Unauth RCE8.1 High@react-router/remix-routes-option-adapterTuxCareReact Router's same-origin redirect with path starting // causes open redirect via protocol-relative URL reinterpretation6.6 Medium@react-router/remix-routes-option-adapterTuxCareReact Router SSR XSS in ScrollRestoration8.2 High@react-router/remix-routes-option-adapterTuxCareReact Router has Path Traversal in File Session Storage9.1 Critical@react-router/remix-routes-option-adapterTuxCareReact Router allows pre-render data spoofing on React-Router framework mode8.2 High@react-router/remix-routes-option-adapterTuxCareReact Router allows a DoS via cache poisoning by forcing SPA mode7.5 High