@remix-run/server-runtime vulnerabilities

CVEs whose affected-version data names the @remix-run/server-runtime package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-53663Low· 3.1

React Router: Potential CSRF via PUT/PATCH/DELETE document requests

React Router: Potential CSRF via PUT/PATCH/DELETE document requests

▾ Sunlitreact-router · react-routerEPSS 0.15%via GHSA

@remix-run/server-runtime vulnerabilities (CVEs) · VulnSea