493 matches found
DoS-via-cache-poisoning-by-forcing-SPA-mode-CVE-2025-43864-
¡Bienvenido a React Router! Una plantilla moderna y lista para producción para construir aplicaciones React full-stack con React Router. Características 🚀 Renderizado del lado del servidor ⚡️ Reemplazo de Módulos en Caliente HMR 📦 Empaquetado y optimización de assets 🔄 Carga de datos y mutaciones ...
CVE-2025-59057-PoC
Existe una vulnerabilidad de XSS en las API meta/ de React Router en el Modo Framework al generar etiquetas script:ld+json, lo que podría permitir la ejecución de JavaScript arbitrario durante el SSR si se utiliza contenido no confiable para generar la etiqueta...
vulnerability-in-Remix-React-Router-CVE-2025-31137-
Resumen Después de leer el write-up de @zhero en su blog personal, decidí construir este CTF para aprender cómo funcionan las cosas y, después de eso, decidí compartirlo con cualquiera que quiera aprender a explotar esta vulnerabilidad. Intenté hacer el CTF con la versión [email protected],...
React-Router-CVE-2025-61686-
Informe de análisis de la vulnerabilidad CVE-2025-61686 Resumen de la vulnerabilidad CVE ID : CVE-2025-61686 Versiones afectadas : @react-router/node 7.0.0 a 7.9.3 Tipo de vulnerabilidad : Path Traversal / Directory Traversal Principio de la vulnerabilidad 1. Ubicación de la vulnerabilidad La...
Security Bulletin: IBM Optim 1.0.0, 1.1.0 and 1.2.0 impacted by XSS, open redirect, denial of service, and remote code execution vulnerabilities in react-router 7.7.0 / 7.12.0
Summary react-router is used by IBM Optim as part of its front-end user interface Optim UI to provide client-side and server-side routing for the web application. CVE-2026-33244 and CVE-2026-33245 are cross-site scripting XSS vulnerabilities in react-router's redirect and RSC handling;...
Pre-render-data-spoofing-on-React-Router-framework-mode-CVE-2025-43865
¡Bienvenido a React Router! Una plantilla moderna y lista para producción para construir aplicaciones React completas usando React Router. Características 🚀 Renderizado del lado del servidor ⚡️ Reemplazo de Módulos en Caliente HMR 📦 Empaquetado y optimización de recursos 🔄 Carga y mutaciones de...
react-router: React Router: Remote Code Execution via prototype pollution in Framework Mode
A flaw was found in React Router when operating in Framework Mode. A remote attacker could exploit an existing prototype pollution vulnerability within the application code. This could lead to unauthorized remote code execution RCE on the server through a two-step attack involving external...
ROOT-APP-NPM-CVE-2026-22029 CVE-2026-22029 in @remix-run/router - Patched by Root
Root has patched CVE-2026-22029 in the @remix-run/router package for Root:npm. Multiple fixed versions available...
Security Bulletin: MongoDB Enterprised Advanced affected by: Open Redirect (CVE-2026-40181)
Summary There are vulnerabilities in router-1.23.2.tgz used in MongoDB Enterprised Advanced for IBM, involving CVE-2026-40181. The vulnerability has been addressed. Vulnerability Details CVEID:CVE-2026-40181 DESCRIPTION: React Router is a router for React. In versions 7.0.0 through 7.14.0 and 6.7...
Linux Distros Unpatched Vulnerability : CVE-2026-33245
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - React Router is a router for React. In versions 7.7.0 through 7.13.1, when using React Router's unstable React Server Components RSC APIs, there is a potential...
Linux Distros Unpatched Vulnerability : CVE-2026-42211
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - React Router is a router for React. In versions 7.0.0 through 7.14.1, when using Framework Mode, a combination of steps could potentially allow unauthorized...
Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in React Router
Summary SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in React Router. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-53666 DESCRIPTION: React Router is a router for React. In versions 6.4.0 through 7.17.0, if...
ROOT-APP-NPM-CVE-2026-53669 CVE-2026-53669 in react-router - Patched by Root
Root has patched CVE-2026-53669 in the react-router package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-55685 CVE-2026-55685 in react-router - Patched by Root
Root has patched CVE-2026-55685 in the react-router package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-53667 CVE-2026-53667 in react-router - Patched by Root
Root has patched CVE-2026-53667 in the react-router package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-QWWW-VCR4-C8H2 GHSA-qwww-vcr4-c8h2 in react-router - Patched by Root
Root has patched GHSA-qwww-vcr4-c8h2 in the react-router package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-53666 CVE-2026-53666 in react-router - Patched by Root
Root has patched CVE-2026-53666 in the react-router package for Root:npm. Multiple fixed versions available...
Security Bulletin: Investigation Assistant App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities
Summary The product includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. Investigation Assistant App for IBM QRadar SIEM has addressed the applicable CVEs in an update. Vulnerability Details CVEID:CVE-2026-53666 DESCRIPTION: React...