MEDIUMnpm
GHSA-2j2x-hqr9-3h42· CVE-2026-40181React Router's same-origin redirect with path starting // causes open redirect via protocol-relative URL reinterpretation
Modified: 9/10/2026
package
npm/@remix-run/router
pkg:npm/%40remix-run/router
HIGH8.0npm
GHSA-2w69-qvjg-hvjx· CVE-2026-22029React Router vulnerable to XSS via Open Redirects
Modified: 2/3/2026