react-router@8.0.0
Skip this version — install 8.5.0 instead.
Followed by 8.0.1 within 24 h — likely a hotfix.
Why this verdict
- Followed by 8.0.1 within 24 h — likely a hotfix.Evidence
- 1 known advisory (worst: high), fixed in 8.3.0.Evidence
- New major version after 7.18.5: expect breaking changes.Evidence
Confidence 100% · algorithm v1 · computed 2026-10-29. How verdicts work
Supply chain and security
- Malware reports
- None known (OSV)
- Known advisories
- 1 known
- License
- MIT
- Install scripts
- None
- Build provenance
- Signed provenance
- Weekly downloads
- 9,412
- GHSA-qwww-vcr4-c8h2React Router: RSC Mode CSRF Bypass Allows Action Execution Before 400 Response
Compatibility
New major version after 7.18.5: expect breaking changes.
Check the official release notes below for behaviour changes before merging.
Release notes
Read the React Router changelog on Changes.Watch or the package page on npm for this version’s features and fixes.
Deprecations and deadlines
The maintainer has not deprecated this version on npm.