MAL-2024-2936
Malicious code in react-router-dom (npm)
Not rated yet
Withdrawn Jul 1, 2024
npm
- Severity
- Not rated yet
- No source has published a CVSS score yet
- Exploit chance (EPSS)
- —
- No score published
- Known exploited
- No
- Not in CISA's catalog
- Weakness
- —
- Not classified
- Fix
- None yet
- No fixed version published
Description
False positive caused by problematic ingestion.
-= Per source details. Do not edit below this line.=-
Affected versions
npm
| Package | Vulnerable | Fixed in |
|---|---|---|
| react-router-dom | 1 listed versions | No fix yet |
How to fix
No fixed version has been published yet. Until one is, remove or replace the package, or turn off or isolate the affected feature. This page updates when a fix ships.
Timeline
- Published
- Last updated by the source
- Withdrawn
Related advisories
| Advisory | Severity | Why it's related |
|---|---|---|
| GHSA-jjmj-jmhj-qwj2 React Router: Open redirect leading to XSS | Medium | Also affects react-router-dom |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor