{"id":"CVE-2026-53669","aliases":["CLSA-2026-1784856210","CLSA-2026-1787668126","CLSA-2026-1788955035","CLSA-2026-1790161471","CLSA-2026-1791465168","CLSA-2026-1792191744","CLSA-2026-1792253401","CLSA-2026-1792253402","CLSA-2026-1792253406","CLSA-2026-1792253416","CLSA-2026-1792269433","CLSA-2026-1792269435","CLSA-2026-1792419111","CLSA-2026-1792419188","CLSA-2026-1792419267","CLSA-2026-1792421941","CLSA-2026-1792424730","CLSA-2026-1792425405","CLSA-2026-1792428107","CLSA-2026-1792430030","CLSA-2026-1792840526","CLSA-2026-1792840748","CLSA-2026-1793099986","CLSA-2026-1793102180","EUVD-2026-49635","GHSA-qwww-vcr4-c8h2","GHSA-wrjc-x8rr-h8h6","RHSA-2026:48780","RHSA-2026:48799","ROOT-APP-NPM-CVE-2026-53669"],"status":"published","title":"React Router: Open redirect via backslash in \u003cLink\u003e and useNavigate (CVE-2025-68470 bypass)","description":"React Router is a router for React. Versions 6.0.0 through 7.17.0 are vulnerable to Open Redirtect through use of backslashes in \u003cLink\u003e and useNavigate. This issue is a follow up to CVE-2025-68470 and has been fixed in version 7.18.0.","severity":{"version":"4.0","score":5.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00319,"percentile":0.25032,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-601"],"published":"2026-07-23T19:38:28Z","modified":"2026-11-06T13:28:06Z","fixes":[{"ecosystem":"npm","package":"react-router","fixed_in":["7.18.0"],"sources":["ghsa","osv"]},{"ecosystem":"TuxCare:npm","package":"react-router","fixed_in":["6.3.0-tuxcare.2","6.30.3-tuxcare.3"],"sources":["osv"]},{"ecosystem":"TuxCare:npm","package":"react-router-dom-v5-compat","fixed_in":["6.30.3-tuxcare.3"],"sources":["osv"]},{"ecosystem":"TuxCare:npm","package":"react-router-dom","fixed_in":["6.30.3-tuxcare.3","6.3.0-tuxcare.2"],"sources":["osv"]},{"ecosystem":"TuxCare:npm","package":"react-router-native","fixed_in":["6.3.0-tuxcare.2","6.30.3-tuxcare.3"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"prometheus3.13","fixed_in":["0:3.13.1-0.5.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"prometheus3.5","fixed_in":["0:3.5.5-0.6.hum1"],"sources":["osv"]},{"ecosystem":"Root:npm","package":"react-router","fixed_in":["7.18.0-aikido.1"],"sources":["osv"]},{"ecosystem":"Root:npm","package":"@rootio/react-router","fixed_in":["7.18.0-root.io.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"npm","package":"react-router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"7.18.0"}]}]},{"source":"osv","ecosystem":"TuxCare:npm","package":"react-router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.5.1-tuxcare.0"},{"fixed":"7.5.1-tuxcare.5"}]}],"versions":["7.5.1","7.5.1-tuxcare.1","7.5.1-tuxcare.2","7.5.1-tuxcare.3","7.5.1-tuxcare.4"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:npm","package":"react-router-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.5.1-tuxcare.0"},{"fixed":"7.5.1-tuxcare.5"}]}],"versions":["7.5.1","7.5.1-tuxcare.1","7.5.1-tuxcare.2","7.5.1-tuxcare.3","7.5.1-tuxcare.4"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:npm","package":"react-router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.30.4-tuxcare.0"},{"fixed":"6.30.4-tuxcare.1"}]}],"versions":["6.30.4"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:npm","package":"react-router-dom-v5-compat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.30.4-tuxcare.0"},{"fixed":"6.30.4-tuxcare.1"}]}],"versions":["6.30.4"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:npm","package":"react-router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.3.0-tuxcare.0"},{"fixed":"6.3.0-tuxcare.2"}]}],"versions":["6.3.0","6.3.0-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"react-router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.30.3-tuxcare.0"},{"fixed":"6.30.3-tuxcare.3"}]}],"versions":["6.30.3","6.30.3-tuxcare.1","6.30.3-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"react-router-dom-v5-compat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.30.3-tuxcare.0"},{"fixed":"6.30.3-tuxcare.3"}]}],"versions":["6.30.3","6.30.3-tuxcare.1","6.30.3-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"react-router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.15.0-tuxcare.0"},{"fixed":"7.15.0-tuxcare.1"}]}],"versions":["7.15.0"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:npm","package":"react-router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.14.2-tuxcare.0"},{"fixed":"7.14.2-tuxcare.1"}]}],"versions":["7.14.2"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:npm","package":"react-router-dom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.30.3-tuxcare.0"},{"fixed":"6.30.3-tuxcare.3"}]}],"versions":["6.30.3","6.30.3-tuxcare.1","6.30.3-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"react-router-dom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.15.0-tuxcare.0"},{"fixed":"7.15.0-tuxcare.1"}]}],"versions":["7.15.0"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:npm","package":"react-router-dom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.3.0-tuxcare.0"},{"fixed":"6.3.0-tuxcare.2"}]}],"versions":["6.3.0","6.3.0-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"react-router-dom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.14.2-tuxcare.0"},{"fixed":"7.14.2-tuxcare.1"}]}],"versions":["7.14.2"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:npm","package":"react-router-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.3.0-tuxcare.0"},{"fixed":"6.3.0-tuxcare.2"}]}],"versions":["6.3.0","6.3.0-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"react-router-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.30.3-tuxcare.0"},{"fixed":"6.30.3-tuxcare.3"}]}],"versions":["6.30.3","6.30.3-tuxcare.1","6.30.3-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@react-router/architect","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.5.1-tuxcare.0"},{"fixed":"7.5.1-tuxcare.5"}]}],"versions":["7.5.1","7.5.1-tuxcare.1","7.5.1-tuxcare.4"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:npm","package":"@react-router/cloudflare","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.5.1-tuxcare.0"},{"fixed":"7.5.1-tuxcare.5"}]}],"versions":["7.5.1","7.5.1-tuxcare.1","7.5.1-tuxcare.4"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:npm","package":"@react-router/express","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.5.1-tuxcare.0"},{"fixed":"7.5.1-tuxcare.5"}]}],"versions":["7.5.1","7.5.1-tuxcare.1","7.5.1-tuxcare.4"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:npm","package":"@react-router/remix-routes-option-adapter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.5.1-tuxcare.0"},{"fixed":"7.5.1-tuxcare.5"}]}],"versions":["7.5.1","7.5.1-tuxcare.1","7.5.1-tuxcare.4"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:npm","package":"@react-router/dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.5.1-tuxcare.0"},{"fixed":"7.5.1-tuxcare.5"}]}],"versions":["7.5.1","7.5.1-tuxcare.1","7.5.1-tuxcare.4"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:npm","package":"@react-router/fs-routes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.5.1-tuxcare.0"},{"fixed":"7.5.1-tuxcare.5"}]}],"versions":["7.5.1","7.5.1-tuxcare.1","7.5.1-tuxcare.4"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:npm","package":"@react-router/serve","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.5.1-tuxcare.0"},{"fixed":"7.5.1-tuxcare.5"}]}],"versions":["7.5.1","7.5.1-tuxcare.1","7.5.1-tuxcare.4"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:npm","package":"create-react-router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.5.1-tuxcare.0"},{"fixed":"7.5.1-tuxcare.5"}]}],"versions":["7.5.1","7.5.1-tuxcare.1","7.5.1-tuxcare.4"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:npm","package":"@remix-run/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.23.3-tuxcare.0"},{"fixed":"1.23.3-tuxcare.1"}]}],"versions":["1.23.3"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:npm","package":"@remix-run/router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.23.2-tuxcare.0"},{"fixed":"1.23.2-tuxcare.1"}]}],"versions":["1.23.2"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:npm","package":"react-router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.14.1-tuxcare.0"},{"fixed":"7.14.1-tuxcare.2"}]}],"versions":["7.14.1","7.14.1-tuxcare.1"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"react-router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.13.1-tuxcare.0"},{"fixed":"7.13.1-tuxcare.2"}]}],"versions":["7.13.1","7.13.1-tuxcare.1"],"bundled":5},{"source":"osv","ecosystem":"npm","package":"react-router","ranges":[{"type":"SEMVER","events":[{"introduced":"6.0.0"},{"fixed":"7.18.0"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"prometheus3.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.13.1-0.5.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"prometheus3.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.5-0.6.hum1"}]}]},{"source":"osv","ecosystem":"Root:npm","package":"react-router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.18.0-aikido.1"}]}]},{"source":"osv","ecosystem":"Root:npm","package":"@rootio/react-router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.18.0-root.io.1"}]}]}],"products":[{"vendor":"@tanstack","product":"react-router"},{"vendor":"remix-run","product":"react-router"},{"vendor":"shopify","product":"react-router"}],"references":[{"url":"https://github.com/remix-run/react-router/security/advisories/GHSA-wrjc-x8rr-h8h6","tags":["x_refsource_CONFIRM","Third Party Advisory","advisory","web","article"]},{"url":"https://github.com/remix-run/react-router/pull/15176","tags":["x_refsource_MISC","Issue Tracking","Patch","fix","web","article"]},{"url":"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7180","tags":["x_refsource_MISC","Release Notes","web","article"]},{"url":"https://github.com/remix-run/react-router/releases/tag/react-router@7.18.0","tags":["x_refsource_MISC","Release Notes","web","article"]},{"url":"http://github.com/remix-run/react-router/pull/15176","tags":["x_refsource_MISC","Issue Tracking","Patch","fix","web","article"]},{"url":"https://github.com/advisories/GHSA-wrjc-x8rr-h8h6"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53669.json","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53669","tags":["advisory"]},{"url":"https://github.com/remix-run/react-router","tags":["package"]},{"url":"https://access.redhat.com/errata/RHSA-2026:48780","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-53669","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_48780.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2507843","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-53669","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:48799","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_48799.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-53669","title":"React Router: Open redirect via backslash in \u003cLink\u003e and useNavigate (CVE-2025-68470 bypass)","description":"React Router is a router for React. Versions 6.0.0 through 7.17.0 are vulnerable to Open Redirtect through use of backslashes in \u003cLink\u003e and useNavigate. This issue is a follow up to CVE-2025-68470 and has been fixed in version 7.18.0.","status":"published","published":"2026-07-27T22:11:39.056Z","modified":"2026-07-28T16:04:33.48Z","cvss":[{"version":"4.0","score":5.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N","level":"medium","assessor":"cna"}],"cwes":["CWE-601"],"updated_at":"2026-11-02T14:19:59.761005Z"}],"euvd":[{"id":"EUVD-2026-49635","description":"React Router is a router for React. Versions 6.0.0 through 7.17.0 are vulnerable to Open Redirtect through use of backslashes in \u003cLink\u003e and useNavigate. This issue is a follow up to CVE-2025-68470 and has been fixed in version 7.18.0.","status":"published","published":"2026-07-27T22:11:39Z","modified":"2026-07-28T16:04:33Z","cvss":[{"version":"4.0","score":5.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N","level":"medium"}],"updated_at":"2026-11-02T18:02:30.949894Z"}],"ghsa":[{"id":"GHSA-wrjc-x8rr-h8h6","title":"React Router: Open redirect via backslash in \u003cLink\u003e and useNavigate (CVE-2025-68470 bypass)","description":"This is a follow up to [CVE-2025-68470](https://github.com/remix-run/react-router/security/advisories/GHSA-9jcx-v3wj-wh4m).  React Router was alerted to certain scenarios in which the fix there was incomplete so there still existed some scenarios where attacker supplied paths passed to navigation mechanisms could result in unexpected external navigations.","status":"published","published":"2026-07-23T19:38:28Z","modified":"2026-07-23T19:38:29Z","cvss":[{"version":"4.0","score":5.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N","level":"medium"}],"cwes":["CWE-601"],"updated_at":"2026-11-02T14:40:52.46233Z"}],"nvd":[{"id":"CVE-2026-53669","description":"React Router is a router for React. Versions 6.0.0 through 7.17.0 are vulnerable to Open Redirtect through use of backslashes in \u003cLink\u003e and useNavigate. This issue is a follow up to CVE-2025-68470 and has been fixed in version 7.18.0.","status":"published","published":"2026-07-27T22:17:31.377Z","modified":"2026-10-24T13:10:00.147Z","cvss":[{"version":"4.0","score":5.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-601"],"updated_at":"2026-11-02T14:12:33.249634Z"}],"osv":[{"id":"CVE-2026-53669","title":"React Router: Open redirect via backslash in \u003cLink\u003e and useNavigate (CVE-2025-68470 bypass)","description":"React Router is a router for React. Versions 6.0.0 through 7.17.0 are vulnerable to Open Redirtect through use of backslashes in \u003cLink\u003e and useNavigate. This issue is a follow up to CVE-2025-68470 and has been fixed in version 7.18.0.","status":"published","published":"2026-07-27T22:11:39.056Z","modified":"2026-10-28T02:30:36.621574583Z","cvss":[{"version":"4.0","score":5.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N","level":"medium"}],"cwes":["CWE-601"],"updated_at":"2026-11-02T15:45:08.132336Z"},{"id":"GHSA-wrjc-x8rr-h8h6","title":"React Router: Open redirect via backslash in \u003cLink\u003e and useNavigate (CVE-2025-68470 bypass)","description":"This is a follow up to [CVE-2025-68470](https://github.com/remix-run/react-router/security/advisories/GHSA-9jcx-v3wj-wh4m).  React Router was alerted to certain scenarios in which the fix there was incomplete so there still existed some scenarios where attacker supplied paths passed to navigation mechanisms could result in unexpected external navigations.","status":"published","published":"2026-07-23T19:38:28Z","modified":"2026-09-10T03:51:12.418370518Z","cvss":[{"version":"4.0","score":5.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N","level":"medium"}],"cwes":["CWE-601"],"updated_at":"2026-11-02T15:46:59.131095Z"},{"id":"RHSA-2026:48780","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","status":"published","published":"2026-07-31T10:15:17Z","modified":"2026-10-17T10:14:49Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:48799","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","status":"published","published":"2026-07-31T10:15:18Z","modified":"2026-10-17T10:14:51Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"CLSA-2026-1784856210","title":"TuxCare security update for 2 packages (3 CVEs)","description":"TuxCare rebuilt 2 packages to address 3 CVEs. Fixed in 7.5.1-tuxcare.5.","status":"published","published":"2026-08-04T14:52:48Z","modified":"2026-10-19T19:15:15.413140949Z","updated_at":"2026-11-02T15:43:46.482572Z"},{"id":"CLSA-2026-1787668126","title":"TuxCare security update for 2 packages (3 CVEs)","description":"TuxCare rebuilt 2 packages to address 3 CVEs. Fixed in 6.30.4-tuxcare.1.","status":"published","published":"2026-08-25T14:28:46Z","modified":"2026-10-17T19:01:07.735863781Z","updated_at":"2026-11-02T15:43:47.591214Z"},{"id":"CLSA-2026-1788955035","title":"TuxCare security update for react-router (1 CVE)","description":"TuxCare rebuilt react-router to address 1 CVE. Fixed in 6.3.0-tuxcare.2.","status":"published","published":"2026-09-09T11:57:15Z","modified":"2026-11-02T19:46:35.668959529Z","updated_at":"2026-11-02T20:28:33.877889Z"},{"id":"CLSA-2026-1790161471","title":"TuxCare security update for 2 packages (1 CVE)","description":"TuxCare rebuilt 2 packages to address 1 CVE. Fixed in 6.30.3-tuxcare.3.","status":"published","published":"2026-09-23T11:04:31Z","modified":"2026-10-23T19:15:05.983085764Z","updated_at":"2026-11-02T15:43:48.28229Z"},{"id":"CLSA-2026-1791465168","title":"TuxCare security update for react-router (4 CVEs)","description":"TuxCare rebuilt react-router to address 4 CVEs. Fixed in 7.15.0-tuxcare.1.","status":"published","published":"2026-10-08T13:12:48Z","modified":"2026-10-17T19:01:21.226787593Z","updated_at":"2026-11-02T15:43:49.016976Z"},{"id":"CLSA-2026-1792191744","title":"TuxCare security update for react-router (4 CVEs)","description":"TuxCare rebuilt react-router to address 4 CVEs. Fixed in 7.14.2-tuxcare.1.","status":"published","published":"2026-10-16T23:02:24Z","modified":"2026-10-26T13:21:31Z","updated_at":"2026-11-02T15:43:51.747192Z"},{"id":"CLSA-2026-1792253401","title":"TuxCare security update for react-router-dom (1 CVE)","description":"TuxCare rebuilt react-router-dom to address 1 CVE. Fixed in 6.30.3-tuxcare.3.","status":"published","published":"2026-10-17T16:09:57Z","modified":"2026-10-17T19:01:35.055120546Z","updated_at":"2026-11-02T15:43:52.011757Z"},{"id":"CLSA-2026-1792253402","title":"TuxCare security update for react-router-dom (4 CVEs)","description":"TuxCare rebuilt react-router-dom to address 4 CVEs. Fixed in 7.15.0-tuxcare.1.","status":"published","published":"2026-10-17T16:09:58Z","modified":"2026-10-17T19:00:57.374661978Z","updated_at":"2026-11-02T15:43:52.011757Z"},{"id":"CLSA-2026-1792253406","title":"TuxCare security update for react-router-dom (1 CVE)","description":"TuxCare rebuilt react-router-dom to address 1 CVE. Fixed in 6.3.0-tuxcare.2.","status":"published","published":"2026-10-17T16:10:02Z","modified":"2026-10-17T19:01:42.614876521Z","updated_at":"2026-11-02T15:43:52.011757Z"},{"id":"CLSA-2026-1792253416","title":"TuxCare security update for react-router-dom (4 CVEs)","description":"TuxCare rebuilt react-router-dom to address 4 CVEs. Fixed in 7.14.2-tuxcare.1.","status":"published","published":"2026-10-17T16:10:13Z","modified":"2026-10-17T19:01:42.615026866Z","updated_at":"2026-11-02T15:43:52.011757Z"},{"id":"CLSA-2026-1792269433","title":"TuxCare security update for react-router-native (1 CVE)","description":"TuxCare rebuilt react-router-native to address 1 CVE. Fixed in 6.3.0-tuxcare.2.","status":"published","published":"2026-10-17T20:37:12Z","modified":"2026-10-18T01:30:14.054762059Z","updated_at":"2026-11-02T15:43:52.288832Z"},{"id":"CLSA-2026-1792269435","title":"TuxCare security update for react-router-native (1 CVE)","description":"TuxCare rebuilt react-router-native to address 1 CVE. Fixed in 6.30.3-tuxcare.3.","status":"published","published":"2026-10-17T20:37:13Z","modified":"2026-10-18T01:30:34.087791997Z","updated_at":"2026-11-02T15:43:52.288832Z"},{"id":"CLSA-2026-1792419111","title":"TuxCare security update for @react-router/architect (3 CVEs)","description":"TuxCare rebuilt @react-router/architect to address 3 CVEs. Fixed in 7.5.1-tuxcare.5.","status":"published","published":"2026-10-19T14:11:50Z","modified":"2026-10-19T19:15:13.329388906Z","updated_at":"2026-11-02T15:43:54.119956Z"},{"id":"CLSA-2026-1792419188","title":"TuxCare security update for @react-router/cloudflare (3 CVEs)","description":"TuxCare rebuilt @react-router/cloudflare to address 3 CVEs. Fixed in 7.5.1-tuxcare.5.","status":"published","published":"2026-10-19T14:13:07Z","modified":"2026-10-19T19:15:10.627188864Z","updated_at":"2026-11-02T15:43:54.119956Z"},{"id":"CLSA-2026-1792419267","title":"TuxCare security update for @react-router/express (3 CVEs)","description":"TuxCare rebuilt @react-router/express to address 3 CVEs. Fixed in 7.5.1-tuxcare.5.","status":"published","published":"2026-10-19T14:14:27Z","modified":"2026-10-19T19:15:11.93217351Z","updated_at":"2026-11-02T15:43:54.119956Z"},{"id":"CLSA-2026-1792421941","title":"TuxCare security update for @react-router/remix-routes-option-adapter (3 CVEs)","description":"TuxCare rebuilt @react-router/remix-routes-option-adapter to address 3 CVEs. Fixed in 7.5.1-tuxcare.5.","status":"published","published":"2026-10-19T14:59:00Z","modified":"2026-10-19T19:15:11.635471736Z","updated_at":"2026-11-02T15:43:54.119956Z"},{"id":"CLSA-2026-1792424730","title":"TuxCare security update for @react-router/dev (3 CVEs)","description":"TuxCare rebuilt @react-router/dev to address 3 CVEs. Fixed in 7.5.1-tuxcare.5.","status":"published","published":"2026-10-19T15:45:29Z","modified":"2026-10-19T19:15:02.916300028Z","updated_at":"2026-11-02T15:43:54.119956Z"},{"id":"CLSA-2026-1792425405","title":"TuxCare security update for @react-router/fs-routes (3 CVEs)","description":"TuxCare rebuilt @react-router/fs-routes to address 3 CVEs. Fixed in 7.5.1-tuxcare.5.","status":"published","published":"2026-10-19T15:56:44Z","modified":"2026-10-19T19:15:12.328827247Z","updated_at":"2026-11-02T15:43:54.119956Z"},{"id":"CLSA-2026-1792428107","title":"TuxCare security update for @react-router/serve (3 CVEs)","description":"TuxCare rebuilt @react-router/serve to address 3 CVEs. Fixed in 7.5.1-tuxcare.5.","status":"published","published":"2026-10-19T16:41:46Z","modified":"2026-10-19T19:15:22.077729358Z","updated_at":"2026-11-02T15:43:54.119956Z"},{"id":"CLSA-2026-1792430030","title":"TuxCare security update for create-react-router (3 CVEs)","description":"TuxCare rebuilt create-react-router to address 3 CVEs. Fixed in 7.5.1-tuxcare.5.","status":"published","published":"2026-10-19T17:13:49Z","modified":"2026-10-19T19:15:22.934222328Z","updated_at":"2026-11-02T15:43:54.119956Z"},{"id":"CLSA-2026-1792840526","title":"TuxCare security update for @remix-run/router (3 CVEs)","description":"TuxCare rebuilt @remix-run/router to address 3 CVEs. Fixed in 1.23.3-tuxcare.1.","status":"published","published":"2026-10-24T11:15:26Z","modified":"2026-10-24T13:30:02.662597028Z","updated_at":"2026-11-02T15:43:54.981307Z"},{"id":"CLSA-2026-1792840748","title":"TuxCare security update for @remix-run/router (4 CVEs)","description":"TuxCare rebuilt @remix-run/router to address 4 CVEs. Fixed in 1.23.2-tuxcare.1.","status":"published","published":"2026-10-24T11:19:08Z","modified":"2026-10-24T13:30:02.671094579Z","updated_at":"2026-11-02T15:43:54.981307Z"},{"id":"CLSA-2026-1793099986","title":"TuxCare security update for react-router (3 CVEs)","description":"TuxCare rebuilt react-router to address 3 CVEs. Fixed in 7.14.1-tuxcare.2.","status":"published","published":"2026-10-27T11:19:46Z","modified":"2026-11-06T13:28:04.081316576Z","updated_at":"2026-11-06T13:44:09.891978Z"},{"id":"CLSA-2026-1793102180","title":"TuxCare security update for react-router (5 CVEs)","description":"TuxCare rebuilt react-router to address 5 CVEs. Fixed in 7.13.1-tuxcare.2.","status":"published","published":"2026-10-27T11:56:20Z","modified":"2026-11-06T13:28:06.223566287Z","updated_at":"2026-11-06T13:44:09.891978Z"},{"id":"ROOT-APP-NPM-CVE-2026-53669","title":"CVE-2026-53669 in react-router - Patched by Root","description":"Root has patched CVE-2026-53669 in the react-router package for Root:npm. Multiple fixed versions available.","status":"published","published":"2026-08-11T12:47:31Z","modified":"2026-08-11T13:30:04.958234673Z","updated_at":"2026-11-02T15:53:27.649662Z"}]}}