@inertiajs/react

The React adapter for Inertia.js

Latest 3.9.1

88%

Total Score

healthy

Frequent releases, active organization-backed development, and verified provenance outweigh minor workflow hygiene findings.

Are you affected? Scan for Free

Health Score Breakdown

Workflow audit

All 10 workflows were analyzed with no untrusted checkouts, script injection, or unpinned actions. The audit found a low-confidence cache-poisoning pattern and a high-confidence low-severity ad hoc package install; three workflows have top-level write permissions, but no untrusted trigger reaches them.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-842900 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @inertiajs/react is vulnerable to Cross-Site Scripting (XSS) in versions 1.0.0 - 2.3.21 and 3.0.0 - 3.0.3.	1.0.0 - 2.3.213.0.0 - 3.0.3	Medium
AIKIDO-2026-73952 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @inertiajs/react is vulnerable to Cross-Site Scripting (XSS) in versions 1.0.0 - 2.3.21.	1.0.0 - 2.3.21	Medium
AIKIDO-2025-10484 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @inertiajs/react is vulnerable to Cross-site Scripting (XSS) in versions 1.0.0 - 2.0.14.	1.0.0 - 2.0.14	Medium