Skip to content

Commit c6fc2b9

Browse files
authored
chore: Remediate 3 Dependabot security alerts (react-router-dom 6→7) (#169)
Upgrade react-router-dom from ^6.30.4 to ^7.18.2 to resolve: - GHSA-wrjc-x8rr-h8h6 (react-router open redirect, CVE-2026-53669) - GHSA-337j-9hxr-rhxg (react-router constructor injection, CVE-2026-53666) - GHSA-jjmj-jmhj-qwj2 (react-router-dom, CVE-2026-53668) All affected packages are dev-only dependencies.
1 parent 1c52826 commit c6fc2b9

2 files changed

Lines changed: 46 additions & 29 deletions

File tree

package-lock.json

Lines changed: 45 additions & 28 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -119,7 +119,7 @@
119119
"puppeteer-core": "^22.15.0",
120120
"react": "^18.2.0",
121121
"react-dom": "^18.2.0",
122-
"react-router-dom": "^6.30.4",
122+
"react-router-dom": "^7.18.2",
123123
"size-limit": "^11.1.2",
124124
"stylelint": "^16.8.1",
125125
"stylelint-config-recommended-scss": "^14.1.0",

0 commit comments

Comments
 (0)