Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Packages
@react-router/express
@react-router/express vulnerabilities (npm)
1 vulnerability.
@react-router/express
npm
Remix and React Router allow URL manipulation via Host / X-Forwarded-Host headers
CVE-2025-31137
Public exploit
Fix available
7.5
High
April 1, 2025
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open