Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
React Router is a router for React. In versions 7.11.0 through 7.17.0, the RSCErrorHandler is missing protocol validation, allowing for redirects from untrusted sources. This issue is a follow up to CVE-2026-53667, and only affects consuming applications if they are using the unstable RSC APIs. This issue has been fixed in version 7.18.0.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-53667 React Router is a router for React. In versions 7.11.0 through 7.17.0, the RSCErrorHandler is missing protocol validation, allowing for redirects from untrusted sourc… https://www.cve.org/CVERecord?id=CVE-2026-53667
Post summary
The text announces CVE-2026-53667, detailing a missing protocol validation in React Router's RSCErrorHandler that allows redirect attacks from untrusted sources.
🚨*CVE* CVE-2026-53667 React Router is a router for React. In versions 7.11.0 through 7.17.0, the RSCErrorHandler is missing protocol validation, allowing for redirects from untrusted sourc… https://www.cve.org/CVERecord?id=CVE-2026-53667 ----- Traducción: CVE-2026-53667 Rea… http://infoflow.cloud`
Post summary
CVE-2026-53667 is disclosed as a missing protocol validation in React Router, enabling potentially malicious redirects.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | shopify | react-router | - | node.js | - |