From 9f034da1d22949d73b5c21cd2a50c8ee3a8881bd Mon Sep 17 00:00:00 2001 From: Andrey Pokhilko Date: Sat, 8 Aug 2026 12:35:09 +0100 Subject: [PATCH] build(deps): bump react-router from 7.15.1 to 7.18.2 in /frontend (#733) Closes four open Dependabot advisories, all patched in 7.18.0: - Unauthenticated DoS via inefficient route matching - Open redirect via backslash in /useNavigate (CVE-2025-68470 bypass) - Arbitrary constructor injection in deserializeErrors() - RSCErrorHandler missing protocol validation (XSS) Supersedes #726, which proposed the 8.3.0 major. v8 is not required for any of these fixes and would additionally impose Node >=22.22.0, React >=19.2.7, ESM-only distribution and an ES2022 target. Co-authored-by: Claude Opus 5 (1M context) --- frontend/package-lock.json | 8 ++++---- frontend/package.json | 2 +- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/frontend/package-lock.json b/frontend/package-lock.json index b0a8bca..fa7b8fb 100644 --- a/frontend/package-lock.json +++ b/frontend/package-lock.json @@ -26,7 +26,7 @@ "react-icons": "^5.5.0", "react-intersection-observer": "^10.0.3", "react-modern-drawer": "^1.4.0", - "react-router": "^7.13.0", + "react-router": "^7.18.2", "react-select": "^5.10.2", "swagger-ui-react": "^5.31.2", "uuid": "^14.0.0" @@ -11620,9 +11620,9 @@ } }, "node_modules/react-router": { - "version": "7.15.1", - "resolved": "https://registry.npmjs.org/react-router/-/react-router-7.15.1.tgz", - "integrity": "sha512-R8rl9HhgikFYoPJymnUtPXWbnDb3oget6lQnfIoupbt61aT9aOhRkDsY2XRhZRyX1Z/8a5sL74fXmFNm3NRK5A==", + "version": "7.18.2", + "resolved": "https://registry.npmjs.org/react-router/-/react-router-7.18.2.tgz", + "integrity": "sha512-aUVMjFm3GAPTTZL7oYr5E7ETiqfQCHRLH+B+5afnICvf0r7kkK4eR6SMuwbSTJw/7t+12khT/Kahij49fqOCIg==", "license": "MIT", "dependencies": { "cookie": "^1.0.1", diff --git a/frontend/package.json b/frontend/package.json index bc946bd..b5d937e 100644 --- a/frontend/package.json +++ b/frontend/package.json @@ -48,7 +48,7 @@ "react-icons": "^5.5.0", "react-intersection-observer": "^10.0.3", "react-modern-drawer": "^1.4.0", - "react-router": "^7.13.0", + "react-router": "^7.18.2", "react-select": "^5.10.2", "swagger-ui-react": "^5.31.2", "uuid": "^14.0.0"