Critical React Router Vulnerability Let Attackers Access or Modify Server Files

Security researchers have identified critical vulnerabilities in React Router that allow attackers to access or modify server files via directory traversal. The flaws affect multiple packages within the React Router ecosystem and carry a CVSS v3 score of 9.8, classifying them as critical severity. CVE IDSeverityAttack VectorFlaw Type

[strawberryhunter]

先日のNext.jsの酷い脆弱性の時にシンプルなReact Routerをお勧めする声があったと思うが。本当にシンプルなのか知らないけど、開発チームはマジで全部把握している人がいないのではないか。