Skip to content
OpenAdvisories

Package · npm

turbo-stream

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2026-34077

    React Router vulnerable to Denial of Service via reflected user input in single-fetch

    React Router is a router for React. In versions 7.7.0 through 7.13.1, when using React Router's unstable React Server Components (RSC) APIs, there is a potential client-side Cross-Site Scripting (XSS) vulnerability in the RSC redirect handling if redirects co…

    remix-run react-router turbo-stream react-router npm