SE
Product
server-runtime
by @remix-run · last CVE Jun 22, 2026
1
CVEs
0
On KEV
3.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 1
Watch

Add server-runtime to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-53663
3.1
0%
Jun 22
React Router: `handleDocumentRequest` CSRF check covers `POST` only; PUT/PATCH/DELETE bypass
Affected: >= 2.17.3, < 2.17.5
Showing 1