ROOT-APP-NPM-CVE-2026-53669 CVE-2026-53669 in react-router - Patched by Root

Root has patched CVE-2026-53669 in the react-router package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-55685 CVE-2026-55685 in react-router - Patched by Root

Root has patched CVE-2026-55685 in the react-router package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-53667 CVE-2026-53667 in react-router - Patched by Root

Root has patched CVE-2026-53667 in the react-router package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-QWWW-VCR4-C8H2 GHSA-qwww-vcr4-c8h2 in react-router - Patched by Root

Root has patched GHSA-qwww-vcr4-c8h2 in the react-router package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-53666 CVE-2026-53666 in react-router - Patched by Root

Root has patched CVE-2026-53666 in the react-router package for Root:npm. Multiple fixed versions available...

Security Bulletin: Investigation Assistant App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. Investigation Assistant App for IBM QRadar SIEM has addressed the applicable CVEs in an update. Vulnerability Details CVEID:CVE-2026-53666 DESCRIPTION: React...

ROOT-APP-NPM-CVE-2026-53663 CVE-2026-53663 in react-router - Patched by Root

Root has patched CVE-2026-53663 in the react-router package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-33245 CVE-2026-33245 in react-router - Patched by Root

Root has patched CVE-2026-33245 in the react-router package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-34077 CVE-2026-34077 in react-router - Patched by Root

Root has patched CVE-2026-34077 in the react-router package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-42342 CVE-2026-42342 in react-router - Patched by Root

Root has patched CVE-2026-42342 in the react-router package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-40181 CVE-2026-40181 in react-router - Patched by Root

Root has patched CVE-2026-40181 in the react-router package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-21884 CVE-2026-21884 in react-router - Patched by Root

Root has patched CVE-2026-21884 in the react-router package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-42211 CVE-2026-42211 in react-router - Patched by Root

Root has patched CVE-2026-42211 in the react-router package for Root:npm. Multiple fixed versions available...

SUSE CVE-2025-68470

React Router is a router for React. In versions 6.0.0 through 6.30.1 and 7.0.0 through 7.9.5, an attacker-supplied path can be crafted so that when a React Router application navigates to it via navigate, , or redirect, the app performs a navigation/redirect to an external URL. This is only an...

SUSE CVE-2026-53666

React Router is a router for React. In versions 6.4.0 through 7.17.0, if application code was written in a way that allows attacker-supplied input to overwrite certain aspects of errors caught by the SSR process, then it was possible for an attacker to trigger unexpected constructor execution on...

SUSE CVE-2026-53667

React Router is a router for React. In versions 7.11.0 through 7.17.0, the RSCErrorHandler is missing protocol validation, allowing for redirects from untrusted sources. This issue is a follow up to CVE-2026-53667, and only affects consuming applications if they are using the unstable RSC APIs...

SUSE CVE-2026-53669

React Router is a router for React. Versions 6.0.0 through 7.17.0 are vulnerable to Open Redirtect through use of backslashes in and useNavigate. This issue is a follow up to CVE-2025-68470 and has been fixed in version 7.18.0...

SUSE CVE-2026-55685

React Router is a router for React. In versions 7.0.0 through 7.17.0, the manifest endpoint could be accessed via unauthenticated targeted requests that would put heavy load on the server and slow down response times. This issue is a follow up to CVE-2026-42342, and does not does not impact React...

Linux Distros Unpatched Vulnerability : CVE-2026-55685

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - React Router is a router for React. In versions 7.0.0 through 7.17.0, the manifest endpoint could be accessed via unauthenticated targeted requests that would p...

The vulnerability of React Router’s routing library in React applications stems from the redirection of URLs to unreliable websites, allowing attackers to carry out phishing attacks.

The vulnerability of the React Router routing library for React applications relates to the redirection of URLs to unreliable websites. Exploiting this vulnerability allows a remote attacker to carry out phishing attacks...