Merge pull request #8993 from github/georgevgs-GHSA-qwww-vcr4-c8h2

Author: advisory-database[bot]

advisories/github-reviewed/2026/07/GHSA-qwww-vcr4-c8h2/GHSA-qwww-vcr4-c8h2.json

@@ -25,6 +25,25 @@
             {
               "introduced": "7.12.0"
             },
+            {
+              "fixed": "7.18.2"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "package": {
+        "ecosystem": "npm",
+        "name": "react-router"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "8.0.0"
+            },
             {
               "fixed": "8.3.0"
             }
@@ -38,6 +57,10 @@
       "type": "WEB",
       "url": "https://github.com/remix-run/react-router/security/advisories/GHSA-qwww-vcr4-c8h2"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/remix-run/react-router/pull/15353"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/remix-run/react-router/commit/7a71c728ad116bd78699a258b2014ce9585729f5"
@@ -50,6 +73,14 @@
       "type": "WEB",
       "url": "https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v830"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/remix-run/react-router/blob/v7/CHANGELOG.md#v7182"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/remix-run/react-router/releases/tag/react-router@7.18.2"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/remix-run/react-router/releases/tag/react-router@8.3.0"