CVE-2026-34077

creationtimestamp| type| source ---|---|--- 2026-06-02 23:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mndp5yc5eh2p 2026-06-04 15:40:51+00:00| seen| https://gist.github.com/alon710/3d94838c8c562b52d8cc99e4e0d339c7 2026-06-28 17:15:14+00:00| seen|...

CVE-2026-34077 React Router vulnerable to Denial of Service via reflected user input in single-fetch

React Router is a router for React. In versions 7.7.0 through 7.13.1, when using React Router's unstable React Server Components RSC APIs, there is a potential client-side Cross-Site Scripting XSS vulnerability in the RSC redirect handling if redirects come from untrusted sources. This does not...