Beveiligingsadvies

CVE-2026-53667

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-27 21:21:16
Laatst bijgewerkt 2026-07-28 13:51:15
Toegewezen door GitHub_M
CVSS-score 6.9
Status PUBLISHED

Beschrijving

React Router is a router for React. In versions 7.11.0 through 7.17.0, the RSCErrorHandler is missing protocol validation, allowing for redirects from untrusted sources. This issue is a follow up to CVE-2026-53667, and only affects consuming applications if they are using the unstable RSC APIs. This issue has been fixed in version 7.18.0.