Skip to content

fix(deps): update dependency react-router to v7 [security] #91

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
renovate wants to merge 1 commit into
base: main
Choose a base branch
from
Open

fix(deps): update dependency react-router to v7 [security] #91

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion packages/app/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -62,7 +62,7 @@
"@material-ui/icons": "^4.9.1",
"react": "^18.0.2",
"react-dom": "^18.0.2",
"react-router": "^6.30.2",
"react-router": "^7.0.0",
"react-router-dom": "^6.30.2"
},
"devDependencies": {
Expand Down
34 changes: 32 additions & 2 deletions yarn.lock
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12519,7 +12519,7 @@ __metadata:
cross-env: "npm:^10.1.0"
react: "npm:^18.0.2"
react-dom: "npm:^18.0.2"
react-router: "npm:^6.30.2"
react-router: "npm:^7.0.0"
react-router-dom: "npm:^6.30.2"
languageName: unknown
linkType: soft
Expand Down Expand Up @@ -14696,6 +14696,13 @@ __metadata:
languageName: node
linkType: hard

"cookie@npm:^1.0.1":
version: 1.1.1
resolution: "cookie@npm:1.1.1"
checksum: 10c0/79c4ddc0fcad9c4f045f826f42edf54bcc921a29586a4558b0898277fa89fb47be95bc384c2253f493af7b29500c830da28341274527328f18eba9f58afa112c
languageName: node
linkType: hard

"copy-to-clipboard@npm:^3.2.0, copy-to-clipboard@npm:^3.3.1, copy-to-clipboard@npm:^3.3.3":
version: 3.3.3
resolution: "copy-to-clipboard@npm:3.3.3"
Expand Down Expand Up @@ -26178,7 +26185,7 @@ __metadata:
languageName: node
linkType: hard

"react-router@npm:6.30.4, react-router@npm:^6.30.2":
"react-router@npm:6.30.4":
version: 6.30.4
resolution: "react-router@npm:6.30.4"
dependencies:
Expand All @@ -26189,6 +26196,22 @@ __metadata:
languageName: node
linkType: hard

Check warning

Code scanning / Trivy

react-router: React Router: Information disclosure via client-side constructor execution Medium

Package: react-router
Installed Version: 6.30.4
Vulnerability CVE-2026-53666
Severity: MEDIUM
Fixed Version: 7.18.0
Link: CVE-2026-53666

Check warning

Code scanning / Trivy

react-router: React Router: Open Redirect vulnerability via backslashes in navigation components Medium

Package: react-router
Installed Version: 6.30.4
Vulnerability CVE-2026-53669
Severity: MEDIUM
Fixed Version: 7.18.0
Link: CVE-2026-53669

"react-router@npm:^7.0.0":
version: 7.18.4
resolution: "react-router@npm:7.18.4"
dependencies:
cookie: "npm:^1.0.1"
set-cookie-parser: "npm:^2.6.0"
peerDependencies:
react: ">=18"
react-dom: ">=18"
peerDependenciesMeta:
react-dom:
optional: true
checksum: 10c0/352d103f9d738c7bf56cbb135c0d3d44e6325d15e360f58b6e844c1f5f8cbcd4ccb2de347f14e53984683fc237505a045633e9cb92c5457a1162dae054e08a32
languageName: node
linkType: hard

"react-side-effect@npm:^2.1.0":
version: 2.1.2
resolution: "react-side-effect@npm:2.1.2"
Expand Down Expand Up @@ -27508,6 +27531,13 @@ __metadata:
languageName: node
linkType: hard

"set-cookie-parser@npm:^2.6.0":
version: 2.7.2
resolution: "set-cookie-parser@npm:2.7.2"
checksum: 10c0/4381a9eb7ee951dfe393fe7aacf76b9a3b4e93a684d2162ab35594fa4053cc82a4d7d7582bf397718012c9adcf839b8cd8f57c6c42901ea9effe33c752da4a45
languageName: node
linkType: hard

"set-function-length@npm:^1.2.2":
version: 1.2.2
resolution: "set-function-length@npm:1.2.2"
Expand Down
Loading