Skip to content
OpenAdvisories

Package · npm

@react-router/express

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2025-31137 Public exploit

    Remix and React Router allow URL manipulation via Host / X-Forwarded-Host headers

    React Router is a multi-strategy router for React bridging the gap from React 18 to React 19. There is a vulnerability in Remix/React Router that affects all Remix 2 and React Router 7 consumers using the Express adapter. Basically, this vulnerability allows …

    remix-run react-router @remix-run/express @react-router/express npm