ROOT-APP-NPM-CVE-2026-53667 CVE-2026-53667 in react-router - Patched by Root

Root has patched CVE-2026-53667 in the react-router package for Root:npm. Multiple fixed versions available...

Security Bulletin: Investigation Assistant App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. Investigation Assistant App for IBM QRadar SIEM has addressed the applicable CVEs in an update. Vulnerability Details CVEID:CVE-2026-53666 DESCRIPTION: React...

CVE-2026-53667 vulnerabilities

Vulnerabilities for packages: vitess...

CVE-2026-53667 vulnerabilities

Vulnerabilities for packages: vitess...

CVE-2026-53667

React Router is a router for React. In versions 7.11.0 through 7.17.0, the RSCErrorHandler is missing protocol validation, allowing for redirects from untrusted sources. This issue is a follow up to CVE-2026-53667, and only affects consuming applications if they are using the unstable RSC APIs...

@aaravpos/appointment-barber-booking (>=1.0.0, <=5.0.0), @aaravpos/appointment-booking-plugin (>=1.0.1, <=8.0.9) +247 more potentially affected by CVE-2026-53667 via react-router (>=7.11.0, <=7.17.0)

react-router NPM version =7.11.0, =1.0.0, =1.0.1, =1.0.0, =0.0.9-alpha-20251217170854-13a5505369f22d85f29bcbbbe455c23672e2aca3, =1.3.7, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =3.2.0-ultramodern.0, =3.2.0-ultramodern.0, =3.2.0-ultramodern.0, =3.2.0-ultramodern.127 and more Source cves:...

@aaravpos/appointment-barber-booking (>=1.0.0, <=5.0.0), @aaravpos/appointment-booking-plugin (>=1.0.1, <=8.0.9) +247 more potentially affected by CVE-2026-53667 via react-router (>=7.11.0, <=7.17.0)

react-router NPM version =7.11.0, =1.0.0, =1.0.1, =1.0.0, =0.0.9-alpha-20251217170854-13a5505369f22d85f29bcbbbe455c23672e2aca3, =1.3.7, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =3.2.0-ultramodern.0, =3.2.0-ultramodern.0, =3.2.0-ultramodern.0, =3.2.0-ultramodern.127 and more Source cves:...

@aaravpos/appointment-barber-booking (>=1.0.0, <=5.0.0), @aaravpos/appointment-booking-plugin (>=1.0.1, <=8.0.9) +247 more potentially affected by CVE-2026-53667 via react-router (>=7.11.0, <=7.17.0)

react-router NPM version =7.11.0, =1.0.0, =1.0.1, =1.0.0, =0.0.9-alpha-20251217170854-13a5505369f22d85f29bcbbbe455c23672e2aca3, =1.3.7, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =3.2.0-ultramodern.0, =3.2.0-ultramodern.0, =3.2.0-ultramodern.0, =3.2.0-ultramodern.127 and more Source cves:...