remix-run · brophdawg11 · Apr 24, 2025 · Apr 24, 2025 · Apr 24, 2025
diff --git a/.changeset/new-hornets-run.md b/.changeset/new-hornets-run.md
diff --git a/.changeset/pre.json b/.changeset/pre.json
diff --git a/.changeset/stale-bats-swim.md b/.changeset/stale-bats-swim.md
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -14,6 +14,7 @@ We manage release notes in this file instead of the paginated Github Releases Pa
 
 - [React Router Releases](#react-router-releases)
   - [v7.5.2](#v752)
+    - [Security Notice](#security-notice)
     - [Patch Changes](#patch-changes)
     - [Unstable Changes](#unstable-changes)
   - [v7.5.1](#v751)
@@ -27,7 +28,7 @@ We manage release notes in this file instead of the paginated Github Releases Pa
     - [Unstable Changes](#unstable-changes-2)
     - [Changes by Package](#changes-by-package)
   - [v7.4.1](#v741)
-    - [Security Notice](#security-notice)
+    - [Security Notice](#security-notice-1)
     - [Patch Changes](#patch-changes-3)
     - [Unstable Changes](#unstable-changes-3)
   - [v7.4.0](#v740)
@@ -326,6 +327,10 @@ Date: YYYY-MM-DD
 
 Date: 2025-04-24
 
+### Security Notice
+
+Fixed 2 security vulnerabilities that could result in cache-poisoning attacks by sending specific headers intended for build-time usage for SPA Mode and Pre-rendering ([GHSA-f46r-rw29-r322](https://github.com/remix-run/react-router/security/advisories/GHSA-f46r-rw29-r322), [GHSA-cpj6-fhp6-mr6j](https://github.com/remix-run/react-router/security/advisories/GHSA-cpj6-fhp6-mr6j)).
+
 ### Patch Changes
 
 - `react-router` - Adjust approach for Pre-rendering/SPA Mode via headers ([#13453](https://github.com/remix-run/react-router/pull/13453))
@@ -452,7 +457,7 @@ Date: 2025-03-28
 
 ### Security Notice
 
-Fixed a security vulnerability that allowed URL manipulation and potential cache pollution via the `Host` and `X-Forwarded-Host` headers due to inadequate port sanitization.
+Fixed a security vulnerability that allowed URL manipulation and potential cache pollution via the `Host` and `X-Forwarded-Host` headers due to inadequate port sanitization ([GHSA-4q56-crqp-v477/CVE-2025-31137](https://github.com/remix-run/react-router/security/advisories/GHSA-4q56-crqp-v477)).
 
 ### Patch Changes
 

diff --git a/packages/create-react-router/CHANGELOG.md b/packages/create-react-router/CHANGELOG.md
@@ -1,6 +1,8 @@
 # `create-react-router`
 
-## 7.5.2-pre.0
+## 7.5.2
+
+_No changes_
 
 ## 7.5.1
 

diff --git a/packages/create-react-router/package.json b/packages/create-react-router/package.json
@@ -1,6 +1,6 @@
 {
   "name": "create-react-router",
-  "version": "7.5.2-pre.0",
+  "version": "7.5.2",
   "description": "Create a new React Router app",
   "homepage": "https://reactrouter.com",
   "bugs": {

diff --git a/packages/react-router-architect/CHANGELOG.md b/packages/react-router-architect/CHANGELOG.md
@@ -1,12 +1,12 @@
 # `@react-router/architect`
 
-## 7.5.2-pre.0
+## 7.5.2
 
 ### Patch Changes
 
 - Updated dependencies:
-  - `[email protected]-pre.0`
-  - `@react-router/[email protected]-pre.0`
+  - `[email protected]`
+  - `@react-router/[email protected]`
 
 ## 7.5.1
 

diff --git a/packages/react-router-architect/package.json b/packages/react-router-architect/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@react-router/architect",
-  "version": "7.5.2-pre.0",
+  "version": "7.5.2",
   "description": "Architect server request handler for React Router",
   "bugs": {
     "url": "https://github.com/remix-run/react-router/issues"

diff --git a/packages/react-router-cloudflare/CHANGELOG.md b/packages/react-router-cloudflare/CHANGELOG.md
@@ -1,11 +1,11 @@
 # `@react-router/cloudflare`
 
-## 7.5.2-pre.0
+## 7.5.2
 
 ### Patch Changes
 
 - Updated dependencies:
-  - `[email protected]-pre.0`
+  - `[email protected]`
 
 ## 7.5.1
 

diff --git a/packages/react-router-cloudflare/package.json b/packages/react-router-cloudflare/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@react-router/cloudflare",
-  "version": "7.5.2-pre.0",
+  "version": "7.5.2",
   "description": "Cloudflare platform abstractions for React Router",
   "bugs": {
     "url": "https://github.com/remix-run/react-router/issues"

diff --git a/packages/react-router-dev/CHANGELOG.md b/packages/react-router-dev/CHANGELOG.md
@@ -1,14 +1,14 @@
 # `@react-router/dev`
 
-## 7.5.2-pre.0
+## 7.5.2
 
 ### Patch Changes
 
 - Adjust approach for Prerendering/SPA Mode via headers ([#13453](https://github.com/remix-run/react-router/pull/13453))
 - Updated dependencies:
-  - `[email protected]-pre.0`
-  - `@react-router/[email protected]-pre.0`
-  - `@react-router/[email protected]-pre.0`
+  - `[email protected]`
+  - `@react-router/[email protected]`
+  - `@react-router/[email protected]`
 
 ## 7.5.1
 

diff --git a/packages/react-router-dev/package.json b/packages/react-router-dev/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@react-router/dev",
-  "version": "7.5.2-pre.0",
+  "version": "7.5.2",
   "description": "Dev tools and CLI for React Router",
   "homepage": "https://reactrouter.com",
   "bugs": {

diff --git a/packages/react-router-dom/CHANGELOG.md b/packages/react-router-dom/CHANGELOG.md
@@ -1,11 +1,11 @@
 # react-router-dom
 
-## 7.5.2-pre.0
+## 7.5.2
 
 ### Patch Changes
 
 - Updated dependencies:
-  - `[email protected]-pre.0`
+  - `[email protected]`
 
 ## 7.5.1
 

diff --git a/packages/react-router-dom/package.json b/packages/react-router-dom/package.json
@@ -1,6 +1,6 @@
 {
   "name": "react-router-dom",
-  "version": "7.5.2-pre.0",
+  "version": "7.5.2",
   "description": "Declarative routing for React web applications",
   "keywords": [
     "react",

diff --git a/packages/react-router-express/CHANGELOG.md b/packages/react-router-express/CHANGELOG.md
@@ -1,12 +1,12 @@
 # `@react-router/express`
 
-## 7.5.2-pre.0
+## 7.5.2
 
 ### Patch Changes
 
 - Updated dependencies:
-  - `[email protected]-pre.0`
-  - `@react-router/[email protected]-pre.0`
+  - `[email protected]`
+  - `@react-router/[email protected]`
 
 ## 7.5.1
 

diff --git a/packages/react-router-express/package.json b/packages/react-router-express/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@react-router/express",
-  "version": "7.5.2-pre.0",
+  "version": "7.5.2",
   "description": "Express server request handler for React Router",
   "bugs": {
     "url": "https://github.com/remix-run/react-router/issues"

diff --git a/packages/react-router-fs-routes/CHANGELOG.md b/packages/react-router-fs-routes/CHANGELOG.md
@@ -1,11 +1,11 @@
 # `@react-router/fs-routes`
 
-## 7.5.2-pre.0
+## 7.5.2
 
 ### Patch Changes
 
 - Updated dependencies:
-  - `@react-router/[email protected]-pre.0`
+  - `@react-router/[email protected]`
 
 ## 7.5.1
 

diff --git a/packages/react-router-fs-routes/package.json b/packages/react-router-fs-routes/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@react-router/fs-routes",
-  "version": "7.5.2-pre.0",
+  "version": "7.5.2",
   "description": "File system routing conventions for React Router, for use within routes.ts",
   "bugs": {
     "url": "https://github.com/remix-run/react-router/issues"

diff --git a/packages/react-router-node/CHANGELOG.md b/packages/react-router-node/CHANGELOG.md
@@ -1,11 +1,11 @@
 # `@react-router/node`
 
-## 7.5.2-pre.0
+## 7.5.2
 
 ### Patch Changes
 
 - Updated dependencies:
-  - `[email protected]-pre.0`
+  - `[email protected]`
 
 ## 7.5.1
 

diff --git a/packages/react-router-node/package.json b/packages/react-router-node/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@react-router/node",
-  "version": "7.5.2-pre.0",
+  "version": "7.5.2",
   "description": "Node.js platform abstractions for React Router",
   "bugs": {
     "url": "https://github.com/remix-run/react-router/issues"

diff --git a/packages/react-router-remix-routes-option-adapter/CHANGELOG.md b/packages/react-router-remix-routes-option-adapter/CHANGELOG.md
@@ -1,11 +1,11 @@
 # `@react-router/remix-config-routes-adapter`
 
-## 7.5.2-pre.0
+## 7.5.2
 
 ### Patch Changes
 
 - Updated dependencies:
-  - `@react-router/[email protected]-pre.0`
+  - `@react-router/[email protected]`
 
 ## 7.5.1
 

diff --git a/packages/react-router-remix-routes-option-adapter/package.json b/packages/react-router-remix-routes-option-adapter/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@react-router/remix-routes-option-adapter",
-  "version": "7.5.2-pre.0",
+  "version": "7.5.2",
   "description": "Adapter for Remix's \"routes\" config option, for use within routes.ts",
   "bugs": {
     "url": "https://github.com/remix-run/react-router/issues"

diff --git a/packages/react-router-serve/CHANGELOG.md b/packages/react-router-serve/CHANGELOG.md
@@ -1,13 +1,13 @@
 # `@react-router/serve`
 
-## 7.5.2-pre.0
+## 7.5.2
 
 ### Patch Changes
 
 - Updated dependencies:
-  - `[email protected]-pre.0`
-  - `@react-router/[email protected]-pre.0`
-  - `@react-router/[email protected]-pre.0`
+  - `[email protected]`
+  - `@react-router/[email protected]`
+  - `@react-router/[email protected]`
 
 ## 7.5.1
 

diff --git a/packages/react-router-serve/package.json b/packages/react-router-serve/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@react-router/serve",
-  "version": "7.5.2-pre.0",
+  "version": "7.5.2",
   "description": "Production application server for React Router",
   "bugs": {
     "url": "https://github.com/remix-run/react-router/issues"

diff --git a/packages/react-router/CHANGELOG.md b/packages/react-router/CHANGELOG.md
@@ -1,6 +1,6 @@
 # `react-router`
 
-## 7.5.2-pre.0
+## 7.5.2
 
 ### Patch Changes
 

diff --git a/packages/react-router/package.json b/packages/react-router/package.json
@@ -1,6 +1,6 @@
 {
   "name": "react-router",
-  "version": "7.5.2-pre.0",
+  "version": "7.5.2",
   "description": "Declarative routing for React",
   "keywords": [
     "react",