@remix-run/router vulnerabilities (npm)

2 vulnerabilities.

• @remix-run/router npm React Router's same-origin redirect with path starting // causes open redirect via protocol-relative URL reinterpretation CVE-2026-40181 Fix available 6.6 MediumJune 2, 2026
• @remix-run/router npm React Router vulnerable to XSS via Open Redirects CVE-2026-22029 Fix available 8.0 HighJanuary 8, 2026