Skip to content
fr Sign in
5.1 Medium

CVE-2026-53669 React Router is a router for React

Description

React Router is a router for React. Versions 6.0.0 through 7.17.0 are vulnerable to Open Redirtect through use of backslashes in <Link> and useNavigate. This issue is a follow up to CVE-2025-68470 and has been fixed in version 7.18.0.

Affected products and versions

Product Affected versions Fixed in
react-router 6.0 6.0.0 → < 7.18.0 7.18.0

References

Timeline

  1. Published
  2. Last modified

Other CVEs of react-router

The 21 CVEs of react-router →
CVE-2026-55685 React Router is a router for React 8.7 High CVE-2026-53668 React Router is a router for React 6.9 Medium CVE-2026-53667 React Router is a router for React 6.9 Medium CVE-2026-53666 React Router is a router for React 6.1 Medium
Track this CVE