6653 matches found
MINI-C97H-9263-H2V9
Bulletin has no description...
MINI-2V47-CCC4-QWPX
Bulletin has no description...
WebOb: Location header normalization during redirect leads to open redirect - again
Impact When WebOb normalizes the HTTP Location header to include the request hostname, it does so by parsing the URL that the user is to be redirected to with Python's urllib.parse, and joining it to the base URL. urlsplit called internally by urljoin however treats a // at the start of a string ...
GHSA-FH3H-VG37-CC95 WebOb: Location header normalization during redirect leads to open redirect - again
Impact When WebOb normalizes the HTTP Location header to include the request hostname, it does so by parsing the URL that the user is to be redirected to with Python's urllib.parse, and joining it to the base URL. urlsplit called internally by urljoin however treats a // at the start of a string ...
CGA-M8RQ-H3X5-GVQ3
Bulletin has no description...
MINI-563R-M73J-8MC9
Bulletin has no description...
MINI-WW3Q-6JVC-H4HX
Bulletin has no description...
MINI-QV3P-H6P6-7VH8
Bulletin has no description...
MINI-PP88-79FW-HVCJ
Bulletin has no description...
MINI-934G-WJPW-PHCP
Bulletin has no description...
MINI-5FRX-VR87-32FF
Bulletin has no description...
MINI-6JHQ-WWX4-CCWX
Bulletin has no description...
CGA-Q78W-H46V-WJ4W
Bulletin has no description...
PT-2026-46304
Name of the Vulnerable Software and Affected Versions WebOb versions prior to 1.8.10 Description An open redirect occurs when the software normalizes the HTTP Location header to include the request hostname. The process involves parsing the redirect URL using Python's urllib.parse and joining it ...
React Router has stored XSS via unescaped Location header in prerendered redirect HTML
When using React Router v7 Framework Mode with Pre-rendering enabled, an improper neutralization of the HTTP Location header value can permit Cross-Site Scripting XSS in statically generated HTML files if the redirect location comes from an untrusted source. !NOTE This does not impact your React...
GHSA-F22V-GFQF-P8F3 React Router has stored XSS via unescaped Location header in prerendered redirect HTML
When using React Router v7 Framework Mode with Pre-rendering enabled, an improper neutralization of the HTTP Location header value can permit Cross-Site Scripting XSS in statically generated HTML files if the redirect location comes from an untrusted source. !NOTE This does not impact your React...
EUVD-2026-33986
React Router has stored XSS via unescaped Location header in prerendered redirect HTML...
SUSE CVE-2026-33244
React Router is a router for React. In versions 7.5.1 through 7.13.1, when using Framework Mode with pre-rendering enabled, improper neutralization of the HTTP Location header value can permit Cross-Site Scripting XSS in the statically generated HTML files if the redirect location comes from an...
PT-2026-46095
When using React Router v7 Framework Mode with Pre-rendering enabled, an improper neutralization of the HTTP Location header value can permit Cross-Site Scripting XSS in statically generated HTML files if the redirect location comes from an untrusted source. !NOTE This does not impact your React...