
Netlify
React Router 7.18 Fixes Two Bugs Its Own Patches Missed
React Router 7.18.0 closes a DoS in the manifest endpoint and an open-redirect bypass, both follow-ups to fixes shipped earlier in 2026 that didn't fully hold.
Topic
2 articles tagged React Router.

React Router 7.18.0 closes a DoS in the manifest endpoint and an open-redirect bypass, both follow-ups to fixes shipped earlier in 2026 that didn't fully hold.

Netlify's changelog warns of five new React Router CVEs fixed in 7.18.0, the third disclosure round in two months, as a national CERT tells sites to patch now.