Skip to content

chore(deps): update dependency react-router-dom [security] - abandoned - #11055

Open
backstage-goalie[bot] wants to merge 1 commit into
mainfrom
renovate/workspace-maintainer-owned/npm-react-router-dom-vulnerability
Open

backstage-goalie[bot] wants to merge 1 commit into
mainfrom
renovate/workspace-maintainer-owned/npm-react-router-dom-vulnerability

Conversation

@backstage-goalie

@backstage-goalie backstage-goalie Bot commented Sep 17, 2026 •

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
react-router-dom (source) 6.22.3 → 6.30.6 age confidence
react-router-dom (source) 6.26.2 → 6.30.6 age confidence
react-router-dom (source) 6.26.1 → 6.30.6 age confidence
react-router-dom (source) 6.23.0 → 6.30.6 age confidence
react-router-dom (source) 6.27.0 → 6.30.6 age confidence
react-router-dom (source) 6.28.0 → 6.30.6 age confidence
react-router-dom (source) ^6.30.2 → ^7.0.0 age confidence
react-router-dom (source) 6.26.0 → 6.30.6 age confidence

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


React Router: Open redirect leading to XSS

CVE-2026-53668 / GHSA-jjmj-jmhj-qwj2

More information

Details

Applications with open redirects could permit attacker crafted links to result in redirects to unexpected external location or XSS vectors.

Severity

  • CVSS Score: 6.9 / 10 (Medium)
  • Vector String: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N

References

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).


Release Notes

remix-run/react-router (react-router-dom)

v6.30.4

Compare Source

v6.30.3

Compare Source

v6.30.2

Compare Source

v6.30.1

Compare Source

v6.30.0

Compare Source

v6.29.0

Compare Source

v6.28.2

Compare Source

v6.28.1

Compare Source

v6.28.0

Compare Source

v6.27.0

Compare Source

v6.26.2

Compare Source

v6.26.1

Compare Source

v6.26.0

Compare Source

v6.25.1

Compare Source

v6.25.0

Compare Source

v6.24.1

Compare Source

v6.24.0

Compare Source

v6.23.1

Compare Source

v6.23.0

Compare Source


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

@backstage-goalie
backstage-goalie Bot force-pushed the renovate/workspace-maintainer-owned/npm-react-router-dom-vulnerability branch 16 times, most recently from 20fdac4 to 2e94cba Compare September 21, 2026 14:40
@backstage-goalie backstage-goalie Bot changed the title chore(deps): update dependency react-router-dom to v6.30.6 [security] chore(deps): update dependency react-router-dom to v6.30.6 [security] - autoclosed Sep 21, 2026
@backstage-goalie backstage-goalie Bot closed this Sep 21, 2026
@backstage-goalie
backstage-goalie Bot deleted the renovate/workspace-maintainer-owned/npm-react-router-dom-vulnerability branch September 21, 2026 15:25
@backstage-goalie backstage-goalie Bot changed the title chore(deps): update dependency react-router-dom to v6.30.6 [security] - autoclosed Update dependency react-router-dom to v6.30.6 [SECURITY] Sep 21, 2026
@backstage-goalie backstage-goalie Bot reopened this Sep 21, 2026
@backstage-goalie
backstage-goalie Bot force-pushed the renovate/workspace-maintainer-owned/npm-react-router-dom-vulnerability branch from 016ecce to 2e94cba Compare September 21, 2026 16:25
@backstage-service

Copy link
Copy Markdown
Collaborator

👋 Reminder: This Renovate patch/minor PR has been open for 7 days.

Please review and merge if the changes look good. If no action is taken, this PR will be labeled force-merge in 7 days.

Signed-off-by: Renovate Bot <bot@renovateapp.com>
@backstage-goalie

backstage-goalie Bot commented Oct 23, 2026 •

Copy link
Copy Markdown
Contributor Author

Changed Packages

Package Name Package Path Changeset Bump Current Version
@backstage-community/plugin-graphiql workspaces/graphiql/plugins/graphiql patch v0.20.0

@backstage-goalie

Copy link
Copy Markdown
Contributor Author

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@backstage-goalie

Copy link
Copy Markdown
Contributor Author

Autoclosing Skipped

This PR has been flagged for autoclosing. However, it is being skipped due to the branch being already modified. Please close/delete it manually or report a bug if you think this is in error.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment