{"action":"Upgrade react-router-dom to 6.30.6 or later.","affected":[{"fixed":"6.30.6","introduced":"6.30.2"}],"component":"react-router-dom","cve_ids":["CVE-2026-53668"],"ecosystem":"npm","epss":0.00341,"exploited":false,"fixed_versions":["6.30.6"],"ghsa_id":"GHSA-jjmj-jmhj-qwj2","id":"tcs_01M5KFYAV4HJ4GEQ1GP2FDWXZ3","modified_at":"2026-09-08T15:15:05.351463216Z","published_at":"2026-07-23T19:36:31Z","references":["https://osv.dev/vulnerability/GHSA-jjmj-jmhj-qwj2","https://github.com/remix-run/react-router/security/advisories/GHSA-jjmj-jmhj-qwj2","https://nvd.nist.gov/vuln/detail/CVE-2026-53668","https://github.com/remix-run/react-router/pull/14718","https://github.com/remix-run/react-router/commit/3a5b5ad0e5cf9918c646509563f5c41a89226ff3","https://github.com/remix-run/react-router","https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7180","https://github.com/remix-run/react-router/blob/v6/CHANGELOG.md#v6306","https://github.com/remix-run/react-router/releases/tag/react-router@6.30.6","https://github.com/remix-run/react-router/releases/tag/react-router@7.18.0"],"severity":{"label":"medium","score":6.9},"sources":[{"source":"osv","source_id":"GHSA-jjmj-jmhj-qwj2","url":"https://osv.dev/vulnerability/GHSA-jjmj-jmhj-qwj2"}],"summary":"React Router: Open redirect leading to XSS"}