Aller au contenu
en Se connecter
6.9 Moyenne

CVE-2026-53667 React Router is a router for React

Description

React Router is a router for React. In versions 7.11.0 through 7.17.0, the RSCErrorHandler is missing protocol validation, allowing for redirects from untrusted sources. This issue is a follow up to CVE-2026-53667, and only affects consuming applications if they are using the unstable RSC APIs. This issue has been fixed in version 7.18.0.

Produits et versions touchés

Produit Versions touchées Corrigé en
react-router 7.11 7.11.0 → < 7.18.0 7.18.0

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de react-router

Les 21 CVE de react-router →
CVE-2026-53669 React Router is a router for React 5.1 Moyenne CVE-2026-55685 React Router is a router for React 8.7 Élevée CVE-2026-53668 React Router is a router for React 6.9 Moyenne CVE-2026-53666 React Router is a router for React 6.1 Moyenne
Suivre cette CVE