Remix-Run Turbo-Stream vulnerabilities

CVE-2026-34077 [HIGH] CWE-770 CVE-2026-34077: React Router is a router for React. In versions 7.7.0 through 7.13.1, when using React Router's unst React Router is a router for React. In versions 7.7.0 through 7.13.1, when using React Router's unstable React Server Components (RSC) APIs, there is a potential client-side Cross-Site Scripting (XSS) vulnerability in the RSC redirect handling if redirects come from untrusted sources. This does not impact applications that are not using the unstable R