Red Hat Build of Keycloak/react-router

Red Hat · Package

8 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
React Router: Open redirect via backslash in <Link> and useNavigate (CVE-2025-68470 bypass)CVE-2026-53669 · GHSA-WRJC-X8RR-H8H6	react-router Cryostat 4/cryostat-openshift-console-plugin-npm	npmRed Hat	Medium	Fix reported	2026-09-10
React Router's same-origin redirect with path starting // causes open redirect via protocol-relative URL reinterpretationCVE-2026-40181 · GHSA-2J2X-HQR9-3H42	@remix-run/router react-router	npmRed Hat	Medium	Fix reported	2026-09-10
React Router: Arbitrary Constructor Injection via deserializeErrors() in React Router SSR HydrationCVE-2026-53666 · GHSA-337J-9HXR-RHXG	react-router Cryostat 4/cryostat-openshift-console-plugin-npm	npmRed Hat	Medium	Fix reported	2026-09-10
React Router vulnerable to DoS via unbounded path expansion in __manifest endpointCVE-2026-42342 · GHSA-8X6R-G9MW-2R78	@remix-run/server-runtime react-router	npmRed Hat	High	Fix reported	2026-09-10
React Router has stored XSS via unescaped Location header in prerendered redirect HTMLCVE-2026-33244 · GHSA-F22V-GFQF-P8F3	react-router Cryostat 4/cryostat-openshift-console-plugin-npm	npmRed Hat	Medium	Fix reported	2026-09-08
React Router: Open redirect leading to XSSCVE-2026-53668 · GHSA-JJMJ-JMHJ-QWJ2	react-router-dom react-router	npmRed Hat	Medium	Fix reported	2026-09-08
React Router vulnerable to Denial of Service via reflected user input in single-fetchCVE-2026-34077 · GHSA-RXV8-25V2-QMQ8	react-router turbo-stream	npmRed Hat	High	Fix reported	2026-06-04
React Router vulnerable to XSS in unstable RSC redirect handling via javascript: redirect targetsCVE-2026-33245 · GHSA-8646-J5J9-6R62	react-router Exploit Intelligence/exploit-intelligence-tech-preview/agent-client-rhel9	npmRed Hat	High	Fix reported	2026-06-04