Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
react-router node package may allow malicious code execution
published 16 days ago
Summary
The @react-router/node package used in your applications contains a security weakness that could let an attacker run unwanted code on your server. This could affect the stability and confidentiality of your services. Update the package to version 7.5.1-tuxcare.10 as soon as possible to resolve the issue.
What to do
- Update react-router @react-router/node to version 7.5.1-tuxcare.10.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | react-router | @react-router/node |
>= 7.5.1-tuxcare.0, < 7.5.1-tuxcare.10 Fix: upgrade to 7.5.1-tuxcare.10
|
Original advisory text
TuxCare security update for @react-router/node (1 CVE)
TuxCare rebuilt @react-router/node to address 1 CVE. Fixed in 7.5.1-tuxcare.10.
Timeline
Published19 Oct 2026
Updated2 Nov 2026
First seen19 Oct 2026
Sources
CLSA-2026-1792419630 · OSV
Track software like this
Free during beta