npm / react-router

React Router's same-origin redirect with path starting // causes open redirect via protocol-relative URL reinterpretation

수정: 2026. 6. 3.

React Router vulnerable to XSS via Open Redirects

수정: 2026. 2. 3.

React Router has XSS Vulnerability

수정: 2026. 2. 3.

React Router's vendored turbo-stream v2 allows arbitrary constructor invocation via TYPE_ERROR deserialization leading to Unauth RCE

수정: 2026. 6. 3.

React Router vulnerable to XSS in unstable RSC redirect handling via javascript: redirect targets

수정: 2026. 6. 3.

React Router SSR XSS in ScrollRestoration

수정: 2026. 2. 3.

React Router vulnerable to DoS via unbounded path expansion in __manifest endpoint

수정: 2026. 6. 8.

React Router has unexpected external redirect via untrusted paths

수정: 2026. 2. 3.

React Router allows pre-render data spoofing on React-Router framework mode

수정: 2026. 2. 3.

React Router has stored XSS via unescaped Location header in prerendered redirect HTML

수정: 2026. 6. 3.

React Router allows a DoS via cache poisoning by forcing SPA mode

수정: 2025. 4. 25.

React Router has CSRF issue in Action/Server Action Request Processing

수정: 2026. 2. 3.

React Router vulnerable to Denial of Service via reflected user input in single-fetch

수정: 2026. 6. 4.