Skip to content

v4.1.7

Choose a tag to compare

View all tags
@github-actions github-actions released this 31 Jul 05:35
v4.1.7
503797b

Security: upgrade react-router to v8.3.0 (CVE fix) and fix transitive
brace-expansion DoS vulnerability.

  • Upgraded: react-router-dom 7.18.1 → react-router 8.3.0. The
    react-router-dom package was removed in v8; all imports now come
    from react-router. Fixes the high-severity CSRF bypass advisory
    (GHSA) affecting RSC mode. Our app uses a standard Vite SPA
    (BrowserRouter + Routes), so the v8 migration was import-only —
    no API or behavior changes.
  • Fixed: brace-expansion transitive dependency. npm audit fix
    bumped the vulnerable brace-expansion package (DoS via unbounded
    expansion).
Assets 23
Loading