Skip to content

chore(deps): bump react-router-dom from 6.30.4 to 7.0.0 #49

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
dependabot wants to merge 1 commit into
base: main
Choose a base branch
from
+56 −11
Open

chore(deps): bump react-router-dom from 6.30.4 to 7.0.0 #49

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion packages/app/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -59,7 +59,7 @@
"react": "^18.0.2",
"react-dom": "^18.0.2",
"react-router": "^6.30.2",
"react-router-dom": "^6.30.2"
"react-router-dom": "^7.0.0"
},
"devDependencies": {
"@backstage/frontend-test-utils": "^0.6.1",
Expand Down
65 changes: 55 additions & 10 deletions yarn.lock
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10724,6 +10724,13 @@ __metadata:
languageName: node
linkType: hard

"@types/cookie@npm:^0.6.0":
version: 0.6.0
resolution: "@types/cookie@npm:0.6.0"
checksum: 10c0/5b326bd0188120fb32c0be086b141b1481fec9941b76ad537f9110e10d61ee2636beac145463319c71e4be67a17e85b81ca9e13ceb6e3bb63b93d16824d6c149
languageName: node
linkType: hard

"@types/cors@npm:^2.8.6":
version: 2.8.19
resolution: "@types/cors@npm:2.8.19"
Expand Down Expand Up @@ -12488,7 +12495,7 @@ __metadata:
react: "npm:^18.0.2"
react-dom: "npm:^18.0.2"
react-router: "npm:^6.30.2"
react-router-dom: "npm:^6.30.2"
react-router-dom: "npm:^7.0.0"
languageName: unknown
linkType: soft

Expand Down Expand Up @@ -14689,6 +14696,13 @@ __metadata:
languageName: node
linkType: hard

"cookie@npm:^1.0.1":
version: 1.1.1
resolution: "cookie@npm:1.1.1"
checksum: 10c0/79c4ddc0fcad9c4f045f826f42edf54bcc921a29586a4558b0898277fa89fb47be95bc384c2253f493af7b29500c830da28341274527328f18eba9f58afa112c
languageName: node
linkType: hard

"copy-to-clipboard@npm:^3.2.0, copy-to-clipboard@npm:^3.3.1":
version: 3.3.3
resolution: "copy-to-clipboard@npm:3.3.3"
Expand Down Expand Up @@ -26320,20 +26334,37 @@ __metadata:
languageName: node
linkType: hard

"react-router-dom@npm:^6.30.2":
version: 6.30.4
resolution: "react-router-dom@npm:6.30.4"
"react-router-dom@npm:^7.0.0":
version: 7.0.0
resolution: "react-router-dom@npm:7.0.0"
dependencies:
"@remix-run/router": "npm:1.23.3"
react-router: "npm:6.30.4"
react-router: "npm:7.0.0"
peerDependencies:
react: ">=16.8"
react-dom: ">=16.8"
checksum: 10c0/1b25ab26a288da852f7b58eec5c14b3f37919e6773a557cd846d3a05d7a7d890c8d49bda93c0a7f497f240df1df8b0ad50635f990aafb55f2fc545ad8269a822
react: ">=18"
react-dom: ">=18"
checksum: 10c0/2860f24491192392ab2f3e4732bc494b9c01a3eae6109f6ed1be9c11d5b7dd740a134874f1d1f5c70742c0616f214269bb7a800440129b0984cce3d8603e1f50
languageName: node
linkType: hard

"react-router@npm:7.0.0":
version: 7.0.0
resolution: "react-router@npm:7.0.0"
dependencies:
"@types/cookie": "npm:^0.6.0"
cookie: "npm:^1.0.1"
set-cookie-parser: "npm:^2.6.0"
turbo-stream: "npm:2.4.0"
peerDependencies:
react: ">=18"
react-dom: ">=18"
peerDependenciesMeta:
react-dom:
optional: true
checksum: 10c0/f157d78f38668ee813bbce828c7fd2a0aaff149cc9119183c6dedae35f442cdf601fc8fcca6f5b40fb4d510a7f52fe1f323e886618edb8d43bdd1b6eaddb2dfb
languageName: node
linkType: hard

Check failure

Code scanning / Trivy

react-router: React Router allows pre-render data spoofing on React-Router framework mode High

Package: react-router
Installed Version: 7.0.0
Vulnerability CVE-2025-43865
Severity: HIGH
Fixed Version: 7.5.2
Link: CVE-2025-43865

Check failure

Code scanning / Trivy

react-router: @remix-run/router: React Router XSS Vulnerability High

Package: react-router
Installed Version: 7.0.0
Vulnerability CVE-2025-59057
Severity: HIGH
Fixed Version: 7.9.0
Link: CVE-2025-59057

Check failure

Code scanning / Trivy

react-router: @remix-run/react: React Router SSR XSS in ScrollRestoration High

Package: react-router
Installed Version: 7.0.0
Vulnerability CVE-2026-21884
Severity: HIGH
Fixed Version: 7.12.0
Link: CVE-2026-21884

Check failure

Code scanning / Trivy

@remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects High

Package: react-router
Installed Version: 7.0.0
Vulnerability CVE-2026-22029
Severity: HIGH
Fixed Version: 7.12.0
Link: CVE-2026-22029

Check failure

Code scanning / Trivy

react-router: React Router: Denial of Service via client-side Cross-Site Scripting in RSC redirect handling High

Package: react-router
Installed Version: 7.0.0
Vulnerability CVE-2026-34077
Severity: HIGH
Fixed Version: 7.14.0
Link: CVE-2026-34077

Check failure

Code scanning / Trivy

react-router: React Router: Remote Code Execution via prototype pollution in Framework Mode High

Package: react-router
Installed Version: 7.0.0
Vulnerability CVE-2026-42211
Severity: HIGH
Fixed Version: 7.14.2
Link: CVE-2026-42211

Check failure

Code scanning / Trivy

react-router: @remix-run/server-runtime: React Router / Remix: Denial of Service via unbounded path expansion in __manifest endpoint High

Package: react-router
Installed Version: 7.0.0
Vulnerability CVE-2026-42342
Severity: HIGH
Fixed Version: 7.15.0
Link: CVE-2026-42342

Check failure

Code scanning / Trivy

React Router: Unauthenticated Denial of Service via Inefficient Route Matching High

Package: react-router
Installed Version: 7.0.0
Vulnerability CVE-2026-55685
Severity: HIGH
Fixed Version: 7.18.0
Link: CVE-2026-55685

Check warning

Code scanning / Trivy

react-router: React Router unexpected external redirect Medium

Package: react-router
Installed Version: 7.0.0
Vulnerability CVE-2025-68470
Severity: MEDIUM
Fixed Version: 6.30.2, 7.9.6
Link: CVE-2025-68470

Check warning

Code scanning / Trivy

react-router: React Router CSRF in Action/Server Action Request Processing Medium

Package: react-router
Installed Version: 7.0.0
Vulnerability CVE-2026-22030
Severity: MEDIUM
Fixed Version: 7.12.0
Link: CVE-2026-22030

Check warning

Code scanning / Trivy

react-router: React Router: Open redirect vulnerability via specially crafted URLs Medium

Package: react-router
Installed Version: 7.0.0
Vulnerability CVE-2026-40181
Severity: MEDIUM
Fixed Version: 7.14.1, 6.30.4
Link: CVE-2026-40181

Check warning

Code scanning / Trivy

react-router: React Router: Information disclosure via client-side constructor execution Medium

Package: react-router
Installed Version: 7.0.0
Vulnerability CVE-2026-53666
Severity: MEDIUM
Fixed Version: 7.18.0
Link: CVE-2026-53666

Check warning

Code scanning / Trivy

react-router: React Router: Open Redirect vulnerability via backslashes in navigation components Medium

Package: react-router
Installed Version: 7.0.0
Vulnerability CVE-2026-53669
Severity: MEDIUM
Fixed Version: 7.18.0
Link: CVE-2026-53669

"react-router@npm:6.30.4, react-router@npm:^6.30.2":
"react-router@npm:^6.30.2":
version: 6.30.4
resolution: "react-router@npm:6.30.4"
dependencies:
Expand Down Expand Up @@ -27747,6 +27778,13 @@ __metadata:
languageName: node
linkType: hard

"set-cookie-parser@npm:^2.6.0":
version: 2.7.2
resolution: "set-cookie-parser@npm:2.7.2"
checksum: 10c0/4381a9eb7ee951dfe393fe7aacf76b9a3b4e93a684d2162ab35594fa4053cc82a4d7d7582bf397718012c9adcf839b8cd8f57c6c42901ea9effe33c752da4a45
languageName: node
linkType: hard

"set-function-length@npm:^1.2.2":
version: 1.2.2
resolution: "set-function-length@npm:1.2.2"
Expand Down Expand Up @@ -29564,6 +29602,13 @@ __metadata:
languageName: node
linkType: hard

"turbo-stream@npm:2.4.0":
version: 2.4.0
resolution: "turbo-stream@npm:2.4.0"
checksum: 10c0/e68b2569f1f16e6e9633d090c6024b2ae9f0e97bfeacb572451ca3732e120ebbb546f3bc4afc717c46cb57b5aea6104e04ef497f9912eef6a7641e809518e98a
languageName: node
linkType: hard

Check failure

Code scanning / Trivy

react-router: React Router: Denial of Service via client-side Cross-Site Scripting in RSC redirect handling High

Package: turbo-stream
Installed Version: 2.4.0
Vulnerability CVE-2026-34077
Severity: HIGH
Fixed Version: 3.0.0
Link: CVE-2026-34077
Comment on lines +29605 to +29610

"tweetnacl@npm:^0.14.3":
version: 0.14.5
resolution: "tweetnacl@npm:0.14.5"
Expand Down
Loading