Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/react-router@0.0.0-experimental-9c60e757e
purl pkg:npm/react-router@0.0.0-experimental-9c60e757e
Next non-vulnerable version 0.0.0
Latest non-vulnerable version 7.12.0
Risk
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-kmsf-z5zd-6qff
Aliases:
CVE-2025-43865
GHSA-cpj6-fhp6-mr6j
react-router: React Router allows pre-render data spoofing on React-Router framework mode
0.0.0
Affected by 0 other vulnerabilities.
7.5.2
Affected by 0 other vulnerabilities.
VCID-rt5f-5ngq-7ugr
Aliases:
CVE-2025-43864
GHSA-f46r-rw29-r322
react-router: React Router allows a DoS via cache poisoning by forcing SPA mode
0.0.0
Affected by 0 other vulnerabilities.
7.5.2
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-05-30T07:24:29.387281+00:00 GitLab Importer Affected by VCID-rt5f-5ngq-7ugr https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/react-router/GHSA-f46r-rw29-r322.yml 38.6.0
2026-05-30T07:24:26.754496+00:00 GitLab Importer Affected by VCID-kmsf-z5zd-6qff https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/react-router/GHSA-cpj6-fhp6-mr6j.yml 38.6.0