Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
react-router may enable malicious code execution
published 8 days ago
Summary
The react-router library used in GitHub Actions can allow an attacker to run unwanted code, potentially compromising the applications that rely on it. Updating to the TuxCare‑provided version 7.13.1‑tuxcare.2 fixes the problem. Apply the update promptly to keep your systems secure.
What to do
- Update GitHub Actions react-router to version 7.13.1-tuxcare.2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | GitHub Actions | react-router |
>= 7.13.1-tuxcare.0, < 7.13.1-tuxcare.2 Fix: upgrade to 7.13.1-tuxcare.2
|
Original advisory text
TuxCare security update for react-router (6 CVEs)
TuxCare rebuilt react-router to address 6 CVEs. Fixed in 7.13.1-tuxcare.2.
Timeline
Published27 Oct 2026
Updated27 Oct 2026
First seen27 Oct 2026
Sources
CLSA-2026-1793102180 · OSV
Track software like this
Free during beta