We have published new CVEs for React Router (5 moderate, 1 high). These are mostly addressing edge cases from previous reports.
Upgrade to v7.18.0 or v8.3.0 for the most up to date fixes. See the advisories on GitHub for more details:
React Router v8.1 is available!
- create-react-router will now install our official Agent Skill (if you want it)
- Instrumentation APIs provides result meta data
- Several bug fixes
Read the changelog 👇
React Router v8 is now available!
- All v7 future flags are now the default (Middleware, Vite env API, Split Route Modules, etc.)
- ESM-only
- New baselines: node 22+, React 19+, Vite 7+
- Easy upgrade from v7
React Router v8 is now in prerelease mode!
Please give it a try and let us know if you running into any issues.
Learn more by reading the changelog linked below.
We just published 7 CVEs identifying security vulnerabilities in React Router and Remix v2
We recommend updating to the latest appropriate versions:
- React Router v7 -- 7.16.0
- React Router v6 -- 6.30.4
- Remix v2 -- 2.17.5
Details, links, and package ranges are listed below
