@remix-run/react

2.17.5 · 1 Jun 2026MIT323.8k / weekRepository Homepage npm Atom feed

Security advisories

From OSV, open ones first. Each release line gets its own fix: an older major is fixed by a patch on that major, not by moving to the newest one.

Paste your package.json, or type the range you declare for @remix-run/react. It is read in your browser and sent nowhere.

Line	Newest	Where it stands
	2.17.5	Safe from 2.17.3
	1.19.3	3 open advisories, worst high · last release Aug 2023, no longer updated

Your version

High
React Router SSR XSS in ScrollRestorationGHSA-8v8x-cx79-35w7 · 8 Jan 2026
- 2.x2.0.0 – 2.17.2Fixed in 2.17.3
- 1.x and older0.21.0 – 1.19.3No fix, no longer updated · move to 2.17.3
High
React Router has XSS VulnerabilityGHSA-3cgp-3xvw-98x8 · 8 Jan 2026
- 2.x2.0.0 – 2.17.0Fixed in 2.17.1
- 1.x1.15.0 – 1.19.3No fix on 1.x · move to 2.17.1

What npm and deps.dev say about the latest release. Signals, not a verdict.

Reading npm and deps.dev…

Registry facts last checked 23 Oct 2026. Releases and advisories last read 23 Oct 2026.