GHSA-9jcx-v3wj-wh4m

ghsaUSosv

React Router has unexpected external redirect via untrusted paths

view advisory published 2026-01-08Licence: CC-BY-4.0

An attacker-supplied path can be crafted so that when a React Router application navigates to it via `navigate()`, `<Link>`, or `redirect()`, the app performs a navigation/redirect to an external URL. This is only an issue if developers pass untrusted content into navigation paths in their application code.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2025-68470US	—	0.49% (41st)	—	2026-01-10
React Router is a router for React. In versions 6.0.0 through 6.30.1 and 7.0.0 through 7.9.5, an attacker-supplied path can be crafted so that when a React Router application navig…

references

External citations — patches, advisories, analysis.

https://github.com/remix-run/react-routerPACKAGE
https://github.com/remix-run/react-router/security/advisories/GHSA-9jcx-v3wj-wh4mWEB
https://nvd.nist.gov/vuln/detail/CVE-2025-68470ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan