Skip to content

[GHSA-qwww-vcr4-c8h2] React Router: RSC Mode CSRF Bypass Allows Action Execution Before 400 Response - #8962

Open
Jojo134 wants to merge 1 commit into
Jojo134/advisory-improvement-8962from
Jojo134-GHSA-qwww-vcr4-c8h2
Open

[GHSA-qwww-vcr4-c8h2] React Router: RSC Mode CSRF Bypass Allows Action Execution Before 400 Response#8962
Jojo134 wants to merge 1 commit into
Jojo134/advisory-improvement-8962from
Jojo134-GHSA-qwww-vcr4-c8h2

Conversation

@Jojo134

@Jojo134 Jojo134 commented Aug 3, 2026

Copy link
Copy Markdown

Updates

  • Affected products
  • References

Comments
Backport fix for 7.xx remix-run/react-router#15353

Copilot AI review requested due to automatic review settings August 3, 2026 12:36
@github

github commented Aug 3, 2026

Copy link
Copy Markdown
Collaborator

Hi there @brophdawg11! A community member has suggested an improvement to your security advisory. If approved, this change will affect the global advisory listed at github.com/advisories. It will not affect the version listed in your project repository.

This change will be reviewed by our Security Curation Team. If you have thoughts or feedback, please share them in a comment here! If this PR has already been closed, you can start a new community contribution for this advisory

@github-actions
github-actions Bot changed the base branch from main to Jojo134/advisory-improvement-8962 August 3, 2026 12:38

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the React Router advisory with v7 backport details and references.

Changes:

  • Adds v7.18.2 patch information.
  • Adds backport PR, changelog, and release references.
  • Updates affected-version metadata.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@brophdawg11

Copy link
Copy Markdown

This can be closed as it will be handled by #8868

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants