CVE-2026-53668 React Router: Open redirect can lead to XSS

🗓️ 27 Jul 2026 21:42:17Reported by GoogleType

osv🔗 osv.dev👁 3 Views

Open redirect in React Router enables cross site scripting; affected versions 6.30.2–6.30.4 and 7.9.6–7.12.0; fixed in 7.13.0.

Reporter	Title	Published	Views	Family All 12
ATTACKERKB	CVE-2026-53668	27 Jul 202621:42	–	attackerkb
Circl	CVE-2026-53668	28 Jul 202600:59	–	circl
CVE	CVE-2026-53668	27 Jul 202621:42	–	cve
Cvelist	CVE-2026-53668 React Router: Open redirect can lead to XSS	27 Jul 202621:42	–	cvelist
EUVD	EUVD-2026-49633	27 Jul 202621:42	–	euvd
Github Security Blog	React Router: Open redirect leading to XSS	23 Jul 202619:36	–	github
NVD	CVE-2026-53668	27 Jul 202622:17	–	nvd
OSV	GHSA-JJMJ-JMHJ-QWJ2 React Router: Open redirect leading to XSS	23 Jul 202619:36	–	osv
OSV	MINI-JQVQ-P9QW-HC7H	24 Jul 202613:51	–	osv
Patchstack	NPM: React Router: Open redirect leading to XSS	23 Jul 202619:36	–	patchstack

Source	Link
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53668.json
github	www.github.com/remix-run/react-router/blob/main/CHANGELOG.md
github	www.github.com/remix-run/react-router/commit/3a5b5ad0e5cf9918c646509563f5c41a89226ff3
github	www.github.com/remix-run/react-router/pull/14718
github	www.github.com/remix-run/react-router/releases/tag/[email protected]
github	www.github.com/remix-run/react-router/security/advisories/GHSA-jjmj-jmhj-qwj2
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-53668

28 Jul 2026 04:02Current

5.7Medium risk

Vulners AI Score5.7

CVSS 3.16.9