Skip to content

fix(deps): update dependency react-router-dom to v6.30.6 [security] - #3099

Merged
kfiven merged 1 commit into
devfrom
renovate/npm-react-router-dom-vulnerability
Sep 10, 2026
Merged

kfiven merged 1 commit into
devfrom
renovate/npm-react-router-dom-vulnerability

Conversation

@renovate

@renovate renovate Bot commented Sep 8, 2026 •

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
react-router-dom (source) 6.30.3 → 6.30.6 age confidence

React Router: Open redirect leading to XSS

CVE-2026-53668 / GHSA-jjmj-jmhj-qwj2

More information

Details

Applications with open redirects could permit attacker crafted links to result in redirects to unexpected external location or XSS vectors.

Severity

  • CVSS Score: 6.9 / 10 (Medium)
  • Vector String: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N

References

This data is provided by the GitHub Advisory Database (CC-BY 4.0).


Release Notes

remix-run/react-router (react-router-dom)

v6.30.4

Compare Source


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies Pull requests that update a dependency file label Sep 8, 2026
@github-actions

github-actions Bot commented Sep 8, 2026

Copy link
Copy Markdown

Preview: https://3099--cinny-pr.netlify.app
⚠️ Exercise caution. Use test accounts. ⚠️

@renovate
renovate Bot force-pushed the renovate/npm-react-router-dom-vulnerability branch from cc6b9d8 to ce17fc1 Compare September 10, 2026 07:05
@github-actions

Copy link
Copy Markdown

Preview: https://3099--cinny-pr.netlify.app
⚠️ Exercise caution. Use test accounts. ⚠️

@kfiven
kfiven merged commit c143b30 into dev Sep 10, 2026
3 checks passed
@kfiven
kfiven deleted the renovate/npm-react-router-dom-vulnerability branch September 10, 2026 07:08
@github-actions github-actions Bot locked and limited conversation to collaborators Sep 10, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants