What’s Vulnerable › Products

@remix-run server-runtime vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your @remix-run server-runtime version is affected

Latest @remix-run server-runtime vulnerabilities

• CVE-2026-53663 — React Router: `handleDocumentRequest` CSRF check covers `POST` only; PUT/PATCH/DELETE bypass (CVSS 3.1)