Vulnerabilities

TI-2026-38708 CVE-2026-53669 · GHSA-wrjc-x8rr-h8h6

React Router: Open redirect via backslash in <Link> and useNavigate (CVE-2025-68470 bypass)

LOW 29

React Router is a router for React.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00319 Published 2026-07-27 Partial fix · 7.18.0 CWE-601

TI-2026-40200 CVE-2026-55685 · GHSA-chx6-hx7r-mcp5

React Router: Unauthenticated Denial of Service via Inefficient Route Matching

MEDIUM 45

React Router is a router for React.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00708 Published 2026-07-27 Partial fix · 7.18.0 CWE-400

TI-2026-38707 CVE-2026-53668 · GHSA-jjmj-jmhj-qwj2

React Router: Open redirect can lead to XSS

LOW 30

React Router is a router for React.

CVSS 3.1MEDIUM 6.9 Network No auth User interaction EPSS 0.00341 Published 2026-07-27 Partial fix · 7.13.0, 6.30.6 CWE-601

TI-2026-38706 CVE-2026-53667 · GHSA-h8fp-f39c-q6mh

Cross-site scripting in remix-run react-router

LOW 30

React Router is a router for React.

CVSS 3.1MEDIUM 6.9 Network No auth User interaction EPSS 0.00355 Published 2026-07-27 Partial fix · 7.18.0 CWE-79

TI-2026-38705 CVE-2026-53666 · GHSA-337j-9hxr-rhxg

React Router: Arbitrary Constructor Injection via deserializeErrors() in React Router SSR Hydration

LOW 28

React Router is a router for React.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0042 Published 2026-07-27 Partial fix · 7.18.0 CWE-470

TI-2026-30645 CVE-2026-42342 · GHSA-8x6r-g9mw-2r78

React Router vulnerable to DoS via unbounded path expansion in __manifest endpoint

LOW 39

React Router is a router for React.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00299 Published 2026-06-02 Partial fix · 7.15.0, 2.17.5 CWE-400

TI-2026-30532 CVE-2026-42211 · GHSA-49rj-9fvp-4h2h

Deserialization of untrusted data in remix-run react-router

LOW 37

React Router is a router for React.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00416 Published 2026-06-02 Partial fix · 7.14.2 CWE-502

TI-2026-28995 CVE-2026-40181 · GHSA-2j2x-hqr9-3h42

Open redirect in remix-run react-router

LOW 35

React Router is a router for React.

CVSS 4.0MEDIUM 6.6 Network No auth No interaction EPSS 0.00221 Published 2026-06-02 Partial fix · 7.14.1, 6.30.4 +1 CWE-601

TI-2026-26400 CVE-2026-34077 · GHSA-rxv8-25v2-qmq8

React Router vulnerable to Denial of Service via reflected user input in single-fetch

LOW 39

React Router is a router for React.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00294 Published 2026-06-02 Partial fix · 7.14.0, 3.0.0 CWE-770

TI-2026-25663 CVE-2026-33245 · GHSA-8646-j5j9-6r62

React Router vulnerable to XSS in unstable RSC redirect handling via javascript: redirect targets

LOW 34

React Router is a router for React.

CVSS 3.1HIGH 8.0 Network No auth User interaction EPSS 0.00189 Published 2026-06-02 Partial fix · 7.13.2 CWE-79

TI-2026-25662 CVE-2026-33244 · GHSA-f22v-gfqf-p8f3

React Router has stored XSS via unescaped Location header in prerendered redirect HTML

LOW 23

React Router is a router for React.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00144 Published 2026-06-02 Partial fix · 7.13.2 CWE-79

TI-2026-17724 CVE-2026-22030 · GHSA-h5cw-625j-3rxh

React Router has CSRF issue in Action/Server Action Request Processing

LOW 28

React Router is a router for React.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00186 Published 2026-01-10 Partial fix · 7.12.0, 2.17.3 CWE-346

TI-2026-17723 CVE-2026-22029 · GHSA-2w69-qvjg-hvjx

React Router vulnerable to XSS via Open Redirects

LOW 38

React Router is a router for React.

CVSS 3.1HIGH 8.0 Network No auth User interaction EPSS 0.00866 Published 2026-01-10 Partial fix · 7.12.0, 1.23.2 CWE-79

TI-2026-17585 CVE-2026-21884 · GHSA-8v8x-cx79-35w7

React Router SSR XSS in ScrollRestoration

LOW 38

React Router is a router for React.

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.00531 Published 2026-01-10 Fixed in 7.12.0, 2.17.3 CWE-79

TI-2025-36699 CVE-2025-59057 · GHSA-3cgp-3xvw-98x8

React Router has XSS Vulnerability

LOW 34

React Router is a router for React.

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.00503 Published 2026-01-10 Fixed in 7.9.0, 2.17.1 CWE-79

TI-2025-42000 CVE-2025-68470 · GHSA-9jcx-v3wj-wh4m

React Router has unexpected external redirect via untrusted paths

LOW 29

React Router is a router for React.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00492 Published 2026-01-10 Partial fix · 7.9.6, 6.30.2 CWE-601

Vulnerabilities

Filters