CVE security advisories and vulnerability history for react-router by npm.
Last updated
npm react-router has 13 published CVE records since 2025, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 2 have a known public exploit. The average CVSS base score across scored CVEs is 7.3.
This page aggregates every publicly disclosed vulnerability (CVE) affecting npm react-router, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.
How the CVSS severity of npm react-router's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
In CISA’s Known Exploited Vulnerabilities catalog
0
None of npm react-router's CVEs are currently listed in CISA's KEV catalog.
Public exploits
2
2 of npm react-router's CVEs have a known public exploit available.
Browse every npm react-router version named in a CVE, then pick one to see only the CVEs that affect it.
13 CVEs
The CWE weakness categories most often found in npm react-router CVEs. Follow any weakness for its full explanation.
How many npm react-router CVEs were published each year.
Browse vulnerabilities for other products by npm.
Common questions about npm react-router vulnerabilities.
npm react-router has 13 published CVE records since 2025.
None of npm react-router's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Yes — 2 of npm react-router's CVEs have a known public exploit.
11 distinct npm react-router versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
npm react-router's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-601 (URL Redirection to Untrusted Site ('Open Redirect')), CWE-400 (Uncontrolled Resource Consumption), CWE-502 (Deserialization of Untrusted Data).
The average CVSS base score across npm react-router's scored CVEs is 7.3.
Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.
Monitor new npm react-router vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.
