Aller au contenu
en Se connecter
7.5 Élevée

CVE-2026-34077 React Router is a router for React

Description

React Router is a router for React. In versions 7.7.0 through 7.13.1, when using React Router's unstable React Server Components (RSC) APIs, there is a potential client-side Cross-Site Scripting (XSS) vulnerability in the RSC redirect handling if redirects come from untrusted sources. This does not impact applications that are not using the unstable RSC APIs in React Router. This is patched in version 7.13.2.

Produits et versions touchés

Produit Versions touchées Corrigé en
react-router 7.0 7.0.0 → < 7.14.0 7.14.0
turbo-stream 3.0 premières → < 3.0.0 3.0.0

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de react-router

Les 21 CVE de react-router →
CVE-2026-53669 React Router is a router for React 5.1 Moyenne CVE-2026-55685 React Router is a router for React 8.7 Élevée CVE-2026-53668 React Router is a router for React 6.9 Moyenne CVE-2026-53667 React Router is a router for React 6.9 Moyenne
Suivre cette CVE