{"action":"Upgrade react-router to 7.18.0 or later.","affected":[{"fixed":"7.18.0","introduced":"6.0.0"}],"component":"react-router","cve_ids":["CVE-2026-53669"],"ecosystem":"npm","epss":0.00319,"exploited":false,"fixed_versions":["7.18.0"],"ghsa_id":"GHSA-wrjc-x8rr-h8h6","id":"tcs_01M5KGFX6WFPYXW8CTR4NV2QZ2","modified_at":"2026-09-10T03:51:12.418370518Z","published_at":"2026-07-23T19:38:28Z","references":["https://osv.dev/vulnerability/GHSA-wrjc-x8rr-h8h6","https://github.com/remix-run/react-router/security/advisories/GHSA-wrjc-x8rr-h8h6","https://github.com/remix-run/react-router/pull/15176","https://github.com/remix-run/react-router","https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7180","https://github.com/remix-run/react-router/releases/tag/react-router@7.18.0","http://github.com/remix-run/react-router/pull/15176"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-wrjc-x8rr-h8h6","url":"https://osv.dev/vulnerability/GHSA-wrjc-x8rr-h8h6"}],"summary":"React Router: Open redirect via backslash in <Link> and useNavigate (CVE-2025-68470 bypass)"}