Red Hat JBoss Enterprise Application Platform Expansion Pack/react-router
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| React Router: Open redirect via backslash in <Link> and useNavigate (CVE-2025-68470 bypass) | react-routerCryostat 4/cryostat-openshift-console-plugin-npm | npmRed Hat | Medium | Fix reported | |
| React Router's same-origin redirect with path starting // causes open redirect via protocol-relative URL reinterpretation | @remix-run/routerreact-router | npmRed Hat | Medium | Fix reported | |
| React Router: Arbitrary Constructor Injection via deserializeErrors() in React Router SSR Hydration | react-routerCryostat 4/cryostat-openshift-console-plugin-npm | npmRed Hat | Medium | Fix reported | |
| React Router has stored XSS via unescaped Location header in prerendered redirect HTML | react-routerCryostat 4/cryostat-openshift-console-plugin-npm | npmRed Hat | Medium | Fix reported | |
| React Router vulnerable to Denial of Service via reflected user input in single-fetch | react-routerturbo-stream | npmRed Hat | High | Fix reported |