react-router vulnerabilities
1 known vulnerability in react-router from TanStack. 1 is rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
1exploited
9.6average CVSS score
Latest first
- 9.6 Critical severity
TanStack Unspecified Exploited
On 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @tanstack/* packages were published to the npm registry. The publishes were authenticated via the legitimate GitHub Actions OIDC trusted-publisher binding for TanStack/ro