- Latest release
- 2.17.5 (Jun 1, 2026): no advisory affects it
- Newest unaffected release
- 2.17.5 (Jun 1, 2026), the latest release
- Advisories
- 1 · 1 critical
- Weekly downloads
- 3,774
- Dependents
- 1
- Releases
- 500+ since 1.18.0 (Jun 26, 2023)
- Registry
- npm
- Releases read
- Nov 8, 2026
Version timeline
- CVE-2025-61686Affects 0.0.0-experimental-01e349e01 to 2.17.1 (2.17.2 is outside it)
Advisories 1
- CVE-2025-61686Critical 9.1
React Router has Path Traversal in File Session Storage
Affected: fixed in 2.17.2.
Fixed in 2.17.2 (released Oct 29, 2025, 73 days before disclosure).
The latest release, 2.17.5, is not affected.
51% of @remix-run/deno downloads last week were affected versions (1.3K).