Skip to content
OpenAdvisories

Package · npm

@remix-run/server-runtime

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-42342

    React Router vulnerable to DoS via unbounded path expansion in __manifest endpoint

    React Router is a router for React. In versions 7.0.0 through 7.14.x of react-router and versions 2.10.0 through 2.17.4 of @remix-run/server-runtime, certain crafted requests can consume disproportionate server resources via unbounded path expansion in the __…

    remix-run react-router @remix-run/server-runtime vitess-24 Wolfi npm