react-router
js · react-routerHeads-up
react-router v7 Framework Mode Insufficient CSRF Checks on PUT/PATCH/DELETE
CSRF checks in React Router v7 Framework Mode were insufficient on PUT/PATCH/DELETE requests, allowing bypass.
16 Jun 2026 · schedule it