| Package | Affected versions | Patched versions |
|---|---|---|
| react-router | ≥ 7.12.0, < 7.18.2≥ 8.0.0, < 8.3.0 | 7.18.28.3.0 |
This is a follow up to CVE-2026-22030 to address related CSRF flows in unstable RSC code paths.
[!NOTE] This only affects your application if you are using the unstable RSC APIs
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free