5 matches found
Security Bulletin: MongoDB Enterprised Advanced affected by: react-router-7.11.0.tgz (CVE-2026-21884, CVE-2026-22029, CVE-2026-22030)
Summary There are vulnerabilities in react-router-7.11.0.tgz used in MongoDB Enterprised Advanced for IBM, involving an XSS vulnerability. The vulnerability has been addressed. Vulnerability Details CVEID:CVE-2026-21884 DESCRIPTION: React Router is a router for React. In @remix-run/react version...
@buttery/tokens (>=0.1.2, <=0.1.10), @common-stack/frontend-stack-react (>=6.0.6-alpha.23, <=10.0.1-alpha.0) +7 more potentially affected by CVE-2026-21884 via @remix-run/react (>=2.0.0, <=2.17.2)
@remix-run/react NPM version =2.0.0, =0.1.2, =6.0.6-alpha.23, =0.1.0, =5.6.0, =0.0.1-alpha.0, =2.0.0-pre.0, =3.0.0, =0.4.0, =0.11.29 Source cves: CVE-2026-21884 Source advisory: SNYK:JS-REMIXRUNREACT-14908292...
31g-form-parser (1.0.107), @accounter/client (>=0.0.3-alpha-20241124130832-1498e8a00d2fa532e452b5ad126a753f4844a237, <=0.0.9-alpha-20260108115520-32a9af5faa8ef0a01fc31a81c85715be41f0f63f) +243 more potentially affected by CVE-2026-21884 via react-router (>=7.0.0, <=7.11.0-pre.0)
react-router NPM version =7.0.0, =0.0.3-alpha-20241124130832-1498e8a00d2fa532e452b5ad126a753f4844a237, =0.0.2, =3.4.0, =0.2.3, =1.1.0, =1.0.3, =0.1.0, =3.3.7, =3.0.0-alpha.2, =3.0.0-alpha.10, =3.4.1 and more Source cves: CVE-2026-21884 Source advisory: SNYK:JS-REACTROUTER-14908293...
31g-form-parser (1.0.107), @accounter/client (>=0.0.3-alpha-20241124130832-1498e8a00d2fa532e452b5ad126a753f4844a237, <=0.0.9-alpha-20260108115520-32a9af5faa8ef0a01fc31a81c85715be41f0f63f) +243 more potentially affected by CVE-2026-21884 via react-router (>=7.0.0, <=7.11.0-pre.0)
react-router NPM version =7.0.0, =0.0.3-alpha-20241124130832-1498e8a00d2fa532e452b5ad126a753f4844a237, =0.0.2, =3.4.0, =0.2.3, =1.1.0, =1.0.3, =0.1.0, =3.3.7, =3.0.0-alpha.2, =3.0.0-alpha.10, =3.4.1 and more Source cves: CVE-2026-21884 Source advisory: OSV:GHSA-8V8X-CX79-35W7...
@buttery/tokens (>=0.1.2, <=0.1.10), @common-stack/frontend-stack-react (>=6.0.6-alpha.23, <=10.0.1-alpha.0) +7 more potentially affected by CVE-2026-21884 via @remix-run/react (>=2.0.0, <=2.17.2)
@remix-run/react NPM version =2.0.0, =0.1.2, =6.0.6-alpha.23, =0.1.0, =5.6.0, =0.0.1-alpha.0, =2.0.0-pre.0, =3.0.0, =0.4.0, =0.11.29 Source cves: CVE-2026-21884 Source advisory: OSV:GHSA-8V8X-CX79-35W7...