Security Update: Multiple vulnerabilities in React Router and Remix

The React Router team has disclosed six security vulnerabilities affecting React Router and Remix. Here’s what Netlify customers need to know. Vulnerabilities Vulnerability: CVE-2025-61686 - Path traversal Remix versions: ≤2.17.1 React Router versions & modes: 7.0.0–7.9.3
All modes Vulnerability: CVE-2025-68470 - Open redirect Remix versions: - React Router versions & modes: 6.0.0–6.30.1, 7.0.0–7.9.5
All modes Vulnerability: CVE-2026-22030 - CSRF Remix versions: ≤2.17.2 React Router versions & modes: 7.0.0–7.11.0
Framework only Vulnerability: CVE-2025-59057 - Meta XSS Remix…