What’s Vulnerable › Products

Shopify Remix-Run/React vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your Shopify Remix-Run/React version is affected

Latest Shopify Remix-Run/React vulnerabilities

• CVE-2026-22030 — React Router has CSRF issue in Action/Server Action Request Processing (CVSS 6.5)
• CVE-2026-22029 — React Router vulnerable to XSS via Open Redirects (CVSS 6.1)
• CVE-2026-21884 — React Router SSR XSS in ScrollRestoration (CVSS 8.2)
• CVE-2025-59057 — React Router has XSS Vulnerability (CVSS 7.6)