Skip to content

Update dependency react-router-dom to v6.30.5 [SECURITY] - abandoned - #10635

Open
backstage-goalie[bot] wants to merge 1 commit into
mainfrom
renovate/workspace-confluence/npm-react-router-dom-vulnerability
Open

backstage-goalie[bot] wants to merge 1 commit into
mainfrom
renovate/workspace-confluence/npm-react-router-dom-vulnerability

Conversation

@backstage-goalie

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
react-router-dom (source) ^6.14.1 → ^6.30.5 age confidence
react-router-dom (source) 6.24.0 → 6.30.5 age confidence

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

⚠️ Renovate does not enforce Minimum Release Age for bump, lockfileUpdate, or rollback updates, so these are raised without a Minimum Release Age check. You will need to manually validate the Minimum Release Age for these package(s).


React Router: Open redirect leading to XSS

CVE-2026-53668 / GHSA-jjmj-jmhj-qwj2

More information

Details

Applications with open redirects could permit attacker crafted links to result in redirects to unexpected external location or XSS vectors.

Severity

  • CVSS Score: 6.9 / 10 (Medium)
  • Vector String: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N

References

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).


Release Notes

remix-run/react-router (react-router-dom)

v6.30.4

Compare Source

v6.30.3

Compare Source

v6.30.2

Compare Source

v6.30.1

Compare Source

v6.30.0

Compare Source

v6.29.0

Compare Source

v6.28.2

Compare Source

v6.28.1

Compare Source

v6.28.0

Compare Source

v6.27.0

Compare Source

v6.26.2

Compare Source

v6.26.1

Compare Source

v6.26.0

Compare Source

v6.25.1

Compare Source

v6.25.0

Compare Source

v6.24.1

Compare Source

v6.24.0

Compare Source

v6.23.1

Compare Source

v6.23.0

Compare Source

v6.22.3

Compare Source

v6.22.2

Compare Source

v6.22.1

Compare Source

v6.22.0

Compare Source

v6.21.3

Compare Source

v6.21.2

Compare Source

v6.21.1

Compare Source

v6.21.0

Compare Source

v6.20.1

Compare Source

v6.20.0

Compare Source

v6.19.0

Compare Source

v6.18.0

Compare Source

v6.17.0

Compare Source

v6.16.0

Compare Source

v6.15.0

Compare Source

v6.14.2

Compare Source


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

@backstage-goalie
backstage-goalie Bot requested review from a team and fjudith as code owners August 31, 2026 14:35
@backstage-goalie backstage-goalie Bot added dependencies Pull requests that update a dependency file security labels Aug 31, 2026
@backstage-goalie
backstage-goalie Bot requested a review from Parsifal-M August 31, 2026 14:35
@backstage-goalie backstage-goalie Bot added dependencies Pull requests that update a dependency file security labels Aug 31, 2026
Signed-off-by: Renovate Bot <bot@renovateapp.com>
@backstage-service
backstage-service force-pushed the renovate/workspace-confluence/npm-react-router-dom-vulnerability branch from c17e16b to 5dbe9a0 Compare August 31, 2026 14:36
@backstage-goalie

Copy link
Copy Markdown
Contributor Author

Changed Packages

Package Name Package Path Changeset Bump Current Version
@backstage-community/plugin-confluence workspaces/confluence/plugins/confluence patch v0.14.1

@backstage-goalie

Copy link
Copy Markdown
Contributor Author

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@backstage-goalie backstage-goalie Bot changed the title Update dependency react-router-dom to v6.30.5 [SECURITY] Update dependency react-router-dom to v6.30.5 [SECURITY] - abandoned Sep 1, 2026
@backstage-goalie

Copy link
Copy Markdown
Contributor Author

Autoclosing Skipped

This PR has been flagged for autoclosing. However, it is being skipped due to the branch being already modified. Please close/delete it manually or report a bug if you think this is in error.

@backstage-service

Copy link
Copy Markdown
Collaborator

👋 Reminder: This Renovate patch/minor PR has been open for 7 days.

Please review and merge if the changes look good. If no action is taken, this PR will be labeled force-merge in 7 days.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file force-merge security workspace/confluence

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant