IA Squad
SearchPT

react-router

js · react-routerHeads-up

react-router v7 Framework Mode Insufficient CSRF Checks on PUT/PATCH/DELETE

CSRF checks in React Router v7 Framework Mode were insufficient on PUT/PATCH/DELETE requests, allowing bypass.

16 Jun 2026 · schedule it