react-router-native vulnerabilities (TuxCare)

5 vulnerabilities.

• react-router-native TuxCare React Router: Open redirect via backslash in <Link> and useNavigate (CVE-2025-68470 bypass) CVE-2026-53669 Fix available 5.1 MediumJuly 23, 2026
• react-router-native TuxCare React Router: Open redirect can lead to XSS CVE-2026-53668 Fix available 6.9 MediumJuly 23, 2026
• react-router-native TuxCare React Router: Arbitrary Constructor Injection via deserializeErrors() in React Router SSR Hydration CVE-2026-53666 Fix available 6.1 MediumJuly 23, 2026
• react-router-native TuxCare React Router's same-origin redirect with path starting // causes open redirect via protocol-relative URL reinterpretation CVE-2026-40181 Fix available 6.6 MediumJune 2, 2026
• react-router-native TuxCare React Router has unexpected external redirect via untrusted paths CVE-2025-68470 Fix available 6.5 MediumJanuary 8, 2026