Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
React Router is a router for React. In versions 6.30.2 through 6.30.4 and 7.9.6 through 7.12.0, applications that allow open redirects are vulnerable to XSS. An attacker could craft a malicious link that redirects users to an unexpected external site or that exploits an XSS vector.This issue has been fixed in version 7.13.0.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-53668 React Router is a router for React. In versions 6.30.2 through 6.30.4 and 7.9.6 through 7.12.0, applications that allow open redirects are vulnerable to XSS. An attac… https://www.cve.org/CVERecord?id=CVE-2026-53668
Post summary
The text discloses an XSS vulnerability in React Router caused by open redirects in specific releases, without mentioning PoC, exploit tools, or patches.
🚨*CVE* CVE-2026-53668 React Router is a router for React. In versions 6.30.2 through 6.30.4 and 7.9.6 through 7.12.0, applications that allow open redirects are vulnerable to XSS. An attac… https://www.cve.org/CVERecord?id=CVE-2026-53668 ----- Traducción: CVE-2026-53668 Rea… http://infoflow.cloud`
Post summary
The post announces a newly disclosed CVE-2026-53668, detailing an XSS vulnerability in React Router’s open‑redirect handling for certain version ranges.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | shopify | react-router | - | node.js | - |