@evolonix/react-router-next is pre-1.0 and under active development. Only the latest published minor version receives security fixes. If a vulnerability is confirmed in an older version, the fix will land in a new release rather than being backported.

Please do not file public GitHub issues for security problems.

Report vulnerabilities privately via GitHub's private vulnerability reporting:

➡️ https://github.com/evolonix/react-router-next/security/advisories/new

When reporting, please include:

• A description of the issue and its impact
• Steps to reproduce, or a proof-of-concept
• The version(s) of @evolonix/react-router-next affected
• Any suggested mitigations, if you have them

• Acknowledgement within 7 days of your report.
• Initial assessment (severity, scope, whether it's reproducible) within 14 days.
• Fix and coordinated disclosure as quickly as practical given the severity. For high-severity issues, the goal is a patched release before public disclosure.
• Credit to the reporter in the published advisory, unless you ask to remain anonymous.

Thanks for helping keep @evolonix/react-router-next and its users safe.