← Database

CVE-2026-53669

MEDIUM CVSS: 6.1 Published: 2026-07-27 Modified: 2026-08-03

Description

React Router is a router for React. Versions 6.0.0 through 7.17.0 are vulnerable to Open Redirtect through use of backslashes in and useNavigate. This issue is a follow up to CVE-2025-68470 and has been fixed in version 7.18.0.

Affected Platforms

Shopify React-Router

Weakness Type

CWE-601

References