https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T23:27:31.278682+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-43864 CVE-2025-43864 — React Router allows a DoS via cache poisoning by forcing SPA mode 2026-10-06T23:27:31.323234+00:00

Affected: remix-run react-router

React Router is a router for React. Starting in version 7.2.0 and prior to version 7.5.2, it is possible to force an application to switch to SPA mode by adding a header to the request. If the application uses SSR and is forced to switch to SPA, this causes an error that completely corrupts the page. If a cache system is in place, this allows the response containing the error to be cached, resulting in a cache poisoning that strongly impacts the availability of the application. This issue has been patched in version 7.5.2.