Open Redirect

Overview Affected versions of this package are vulnerable to Open Redirect via the navigation mechanisms when attacker-supplied paths containing a backslash are processed. An attacker can redirect users to unintended external sites by crafting malicious links or inputs. Remediation Upgrade...

Open Redirect

Overview Affected versions of this package are vulnerable to Open Redirect via the navigation mechanisms when attacker-supplied paths containing a backslash are processed. An attacker can redirect users to unintended external sites by crafting malicious links or inputs. Remediation Upgrade...

0beny1s (1.1.6), 0desgin (0.0.1) +15911 more potentially affected by CVE-2026-53669 via react-router (>=6.0.0, <=7.17.0)

react-router NPM version =6.0.0, =7.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on react-router and may be impacted: - 0beny1s 1.1.6 - 0desgin 0.0.1 - 0scarclassa 1.0.1 - 0scarclassb 1.0.1 - 0scarclassc 1.0.1 - 0scarclassd 1.0.1 - 0scarclasse 1.0...

NPM: React Router: Open redirect leading to XSS

NPM: React Router: Open redirect leading to XSS vulnerability discovered by ? in WordPress Npm react-router-dom versions = 6.30.2, = 6.30.4...

Open Redirect

Overview Affected versions of this package are vulnerable to Open Redirect via the redirect. An attacker can cause users to be redirected to malicious external sites or execute unauthorized scripts by enticing them to click crafted links. Remediation Upgrade react-router to version 7.13.0 or...

NPM: React Router: Open redirect leading to XSS

NPM: React Router: Open redirect leading to XSS vulnerability discovered by ? in WordPress Npm react-router versions = 7.9.6, = 7.12.0...

@accounter/client (>=0.0.8-alpha-20251116084105-a1cea854a8885090847180b84764d326dbe1ab77, <=0.0.10-alpha-20260124220016-4e2b62f7c68c0c6fd69aea71f714b37188ddd976), @boxyhq/react-ui (3.5.2) +63 more potentially affected by CVE-2026-53668 via react-router (>=7.9.6, <=7.12.0-pre.0)

react-router NPM version =7.9.6, =0.0.8-alpha-20251116084105-a1cea854a8885090847180b84764d326dbe1ab77, =1.0.1-MON-198407-add-selinux-sudo-check.0, =3.4.9, =0.1.9, =1.21.9, =1.21.9, =0.3.1, =1.5.0, =0.4.0, =0.0.5, =0.0.7 and more Source cves: CVE-2026-53668 Source advisory:...

Open Redirect

Overview Affected versions of this package are vulnerable to Open Redirect via the redirect. An attacker can cause users to be redirected to malicious external sites or execute unauthorized scripts by enticing them to click crafted links. Remediation Upgrade org.webjars.npm:react-router to versio...

@accounter/client (>=0.0.8-alpha-20251116084105-a1cea854a8885090847180b84764d326dbe1ab77, <=0.0.10-alpha-20260124220016-4e2b62f7c68c0c6fd69aea71f714b37188ddd976), @boxyhq/react-ui (3.5.2) +63 more potentially affected by CVE-2026-53668 via react-router (>=7.9.6, <=7.12.0-pre.0)

react-router NPM version =7.9.6, =0.0.8-alpha-20251116084105-a1cea854a8885090847180b84764d326dbe1ab77, =1.0.1-MON-198407-add-selinux-sudo-check.0, =3.4.9, =0.1.9, =1.21.9, =1.21.9, =0.3.1, =1.5.0, =0.4.0, =0.0.5, =0.0.7 and more Source cves: CVE-2026-53668 Source advisory: OSV:GHSA-JJMJ-JMHJ-QWJ2...

0beny1s (1.1.6), 0scar_classa (1.0.1) +13687 more potentially affected by CVE-2026-53668 via react-router-dom (>=6.30.2, <=6.30.4)

react-router-dom NPM version =6.30.2, =6.30.4 is affected by a known vulnerability. The following packages have a transitive dependency on react-router-dom and may be impacted: - 0beny1s 1.1.6 - 0scarclassa 1.0.1 - 0scarclassb 1.0.1 - 0scarclassc 1.0.1 - 0scarclassd 1.0.1 - 0scarclasse 1.0.1 -...

GHSA-JJMJ-JMHJ-QWJ2 React Router: Open redirect leading to XSS

Applications with open redirects could permit attacker crafted links to result in redirects to unexpected external location or XSS vectors...

React Router: Open redirect leading to XSS

Applications with open redirects could permit attacker crafted links to result in redirects to unexpected external location or XSS vectors...

NPM: React Router: RSCErrorHandler Missing Protocol Validation (XSS)

NPM: React Router: RSCErrorHandler Missing Protocol Validation XSS vulnerability discovered by ? in WordPress Npm react-router versions = 7.11.0, 7.18.0...

GHSA-H8FP-F39C-Q6MH React Router: RSCErrorHandler Missing Protocol Validation (XSS)

This is a follow up to https://github.com/remix-run/react-router/security/advisories/GHSA-8646-j5j9-6r62. React Router was alerted of a code path in the unstable RSC error handling path in which redirects from untrusted sources could still result in an XSS vector via attacker-supplied redirect...

@aaravpos/appointment-barber-booking (>=1.0.0, <=4.0.5), @aaravpos/appointment-booking-plugin (>=1.0.1, <=7.0.6) +264 more potentially affected by CVE-2026-53667 via react-router (>=7.11.0, <=7.17.0)

react-router NPM version =7.11.0, =1.0.0, =1.0.1, =0.0.9-alpha-20251217170854-13a5505369f22d85f29bcbbbe455c23672e2aca3, =1.3.7, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =3.2.0-ultramodern.0, =3.2.0-ultramodern.0, =3.2.0-ultramodern.0, =3.2.0-ultramodern.0, =3.2.0-ultramodern.127 and more Source...

@aaravpos/appointment-barber-booking (>=1.0.0, <=4.0.5), @aaravpos/appointment-booking-plugin (>=1.0.1, <=7.0.6) +264 more potentially affected by CVE-2026-53667 via react-router (>=7.11.0, <=7.17.0)

react-router NPM version =7.11.0, =1.0.0, =1.0.1, =0.0.9-alpha-20251217170854-13a5505369f22d85f29bcbbbe455c23672e2aca3, =1.3.7, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =3.2.0-ultramodern.0, =3.2.0-ultramodern.0, =3.2.0-ultramodern.0, =3.2.0-ultramodern.0, =3.2.0-ultramodern.127 and more Source...

React Router: RSCErrorHandler Missing Protocol Validation (XSS)

This is a follow up to https://github.com/remix-run/react-router/security/advisories/GHSA-8646-j5j9-6r62. React Router was alerted of a code path in the unstable RSC error handling path in which redirects from untrusted sources could still result in an XSS vector via attacker-supplied redirect...

0beny1s (1.1.6), 0desgin (0.0.1) +15106 more potentially affected by CVE-2026-53666 via react-router (>=6.4.0, <=7.17.0)

react-router NPM version =6.4.0, =7.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on react-router and may be impacted: - 0beny1s 1.1.6 - 0desgin 0.0.1 - 0scarclassa 1.0.1 - 0scarclassb 1.0.1 - 0scarclassc 1.0.1 - 0scarclassd 1.0.1 - 0scarclasse 1.0...

0beny1s (1.1.6), 0desgin (0.0.1) +15106 more potentially affected by CVE-2026-53666 via react-router (>=6.4.0, <=7.17.0)

react-router NPM version =6.4.0, =7.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on react-router and may be impacted: - 0beny1s 1.1.6 - 0desgin 0.0.1 - 0scarclassa 1.0.1 - 0scarclassb 1.0.1 - 0scarclassc 1.0.1 - 0scarclassd 1.0.1 - 0scarclasse 1.0...

GHSA-337J-9HXR-RHXG React Router: Arbitrary Constructor Injection via deserializeErrors() in React Router SSR Hydration

If application code allows attacker supplied input to overwrite certain aspects of errors caught by the SSR process, then it was possible for attacker to trigger unexpected constructor execution on the client which would trigger outbound network traffic. This is only possible with very specific a...