React Router is a router for React. In versions 7.7.0 through 7.13.1, when using React Router's unstable React Server Components (RSC) APIs, there is a potential client-side Cross-Site Scripting (XSS) vulnerability in the RSC redirect handling if redirects come from untrusted sources. This does not impact applications that are not using the unstable RSC APIs in React Router. This is patched in version 7.13.2.
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:NShopify React Router
APPShopify7.7.0 – 7.13.2 (excl.)
Related vulnerabilities
React Router: Atak DoS na endpoint manifest — nadmierne obciążenie serwera
React Router is a router for React. In versions 7.0.0 through 7.14.x of react-router and versions 2.10.0 throu...
React Router is a router for React. In versions 7.7.0 through 7.13.1, when using React Router's unstable React...
React Router is a router for React. In versions 7.0.0 through 7.14.1, when using Framework Mode, a combination...
React Router is a router for React. In @remix-run/react version prior to 2.17.3. and react-router 7.0.0 throug...