CVE-2026-53669
1 advisory.
npm/react-router CVE-2026-53669: medium, EPSS 0.32%
React Router: Open redirect via backslash in <Link> and useNavigate (CVE-2025-68470 bypass)
Action: Upgrade react-router to 7.18.0 or later.
npm i react-router@7.18.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 6.0.0 | 7.18.0 | - |
Fixed versions
| 7.18.0 |
Sources
- osv: GHSA-wrjc-x8rr-h8h6
- https://github.com/remix-run/react-router/security/advisories/GHSA-wrjc-x8rr-h8h6
- https://github.com/remix-run/react-router/pull/15176
- https://github.com/remix-run/react-router
- https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7180
- https://github.com/remix-run/react-router/releases/tag/react-router@7.18.0
- http://github.com/remix-run/react-router/pull/15176
CVE-2026-53669 · published · modified · JSON