React SPA security posture
Review linked rules in the directory and use Composer to export guardrails for your IDE. Detailed posture metrics will appear here as the catalog grows.
2 linked rules in the directory.
Top risks for this stack
00 critical03 high
React Router: Unauthenticated Denial of Service via Inefficient Route MatchingHIGH
Jul 2026
No rule coverage yet — consider contributing a rule.
React Router: Open redirect via backslash in <Link> and useNavigate (CVE-2025-68470 bypass)MEDIUM
Jul 2026
No rule coverage yet — consider contributing a rule.
React Router: Open redirect leading to XSSMEDIUM
Jul 2026
No rule coverage yet — consider contributing a rule.
React Router: RSCErrorHandler Missing Protocol Validation (XSS)MEDIUM
Jul 2026
No rule coverage yet — consider contributing a rule.
React Router: Arbitrary Constructor Injection via deserializeErrors() in React Router SSR HydrationMEDIUM
Jul 2026
No rule coverage yet — consider contributing a rule.
Axios Node HTTP adapter can use an inherited proxy after interceptor config cloningHIGH
Jul 2026
No rule coverage yet — consider contributing a rule.
Axios form serializer maxDepth bypass via {} metatokenHIGH
Jul 2026
No rule coverage yet — consider contributing a rule.
Axios: HTTP/2 streamed uploads bypass `maxBodyLength`MEDIUM
Jul 2026
No rule coverage yet — consider contributing a rule.