Red Hat Fuse 7/react-router
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| React Router's same-origin redirect with path starting // causes open redirect via protocol-relative URL reinterpretation | @remix-run/routerreact-router | npmRed Hat | Medium | Fix reported | |
| React Router vulnerable to DoS via unbounded path expansion in __manifest endpoint | @remix-run/server-runtimereact-router | npmRed Hat | High | Fix reported | |
| React Router has stored XSS via unescaped Location header in prerendered redirect HTML | react-routerCryostat 4/cryostat-openshift-console-plugin-npm | npmRed Hat | Medium | Fix reported | |
| React Router vulnerable to Denial of Service via reflected user input in single-fetch | react-routerturbo-stream | npmRed Hat | High | Fix reported | |
| React Router vulnerable to XSS in unstable RSC redirect handling via javascript: redirect targets | react-routerExploit Intelligence/exploit-intelligence-tech-preview/agent-client-rhel9 | npmRed Hat | High | Fix reported |