ROOT-APP-NPM-CVE-2026-40181 CVE-2026-40181 in react-router - Patched by Root

🗓️ 04 Aug 2026 12:12:16Reported by GoogleType

osv🔗 osv.dev👁 6 Views

Root has patched CVE-2026-40181 in @rootio/react-router for Root:npm; multiple fixed versions.

Reporter	Title	Published	Views	Family All 40
IBM Security Bulletins	Security Bulletin:Vulnerability in React affects IBM Netezza Appliance	10 Aug 202609:54	–	ibm
IBM Security Bulletins	Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in React Router	6 Jul 202617:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Application Modernization Accelerator is affected by multiple vulnerabilities found in Java, JavaScript and IBM WebSphere Application Server Liberty	10 Jul 202612:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security QRadar Log Management AQL Plugin is vulnerable to using components with known vulnerabilities	13 Jul 202620:16	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities that affects IBM Db2 Genius Hub	13 Jul 202617:09	–	ibm
IBM Security Bulletins	Security Bulletin: Improper input validation, integer overflow, and other vulnerabilities might affect IBM Storage Defender - Resiliency Service	17 Aug 202615:41	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerability in JavaScript affects IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak	20 Jun 202612:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Transformation Advisor is affected by multiple vulnerabilities found in Java, JavaScript and IBM WebSphere Application Server Liberty	10 Jul 202612:21	–	ibm
ATTACKERKB	CVE-2026-40181	2 Jun 202617:55	–	attackerkb
BDU FSTEC	The vulnerability of React Router’s routing library in React applications stems from the redirection of URLs to unreliable websites, allowing attackers to carry out phishing attacks.	31 Jul 202600:00	–	bdu_fstec

04 Aug 2026 19:30Current

5.5Medium risk

Vulners AI Score5.5

CVSS 3.16.1

CVSS 48.7

EPSS0.00162

SSVC