← The IT Show
Security
Security · Remix React Router
React Router Patches Client-Side Script Execution Flaw in Loader/Action Redirects (CVE-2026-22029) Published 16 minutes ago · Updated 7 minutes ago
CVE-2026-22029 affects @remix-run/router before 1.23.2 and react-router 7.0.0 through 7.11.0, where SPA redirects returned from loaders or actions in Framework, Data, or unstable RSC modes can produce unsafe URLs that trigger unintended JavaScript execution in the browser. Exploitation requires redirect paths built from untrusted content or an open redirect; Declarative Mode is unaffected, and fixes are available in @remix-run/router 1.23.2 and react-router 7.12.0.
Read the original coverage at National Vulnerability Database (NVD) Captured 23 minutes ago
Related coverage CVE-2026-25639 National Vulnerability Database (NVD) · captured 23 minutes ago CVE-2026-29063 National Vulnerability Database (NVD) · captured 23 minutes ago CVE-2026-27137 National Vulnerability Database (NVD) · captured 23 minutes ago CVE-2026-32285 National Vulnerability Database (NVD) · captured 23 minutes ago CVE-2026-33891 National Vulnerability Database (NVD) · captured 23 minutes ago CVE-2026-33894 National Vulnerability Database (NVD) · captured 23 minutes ago CVE-2026-33895 National Vulnerability Database (NVD) · captured 23 minutes ago CVE-2026-33896 National Vulnerability Database (NVD) · captured 23 minutes ago CVE-2026-33937 National Vulnerability Database (NVD) · captured 23 minutes ago CVE-2026-33938 National Vulnerability Database (NVD) · captured 23 minutes ago CVE-2026-33939 National Vulnerability Database (NVD) · captured 23 minutes ago CVE-2026-33940 National Vulnerability Database (NVD) · captured 23 minutes ago CVE-2026-33941 National Vulnerability Database (NVD) · captured 23 minutes ago CVE-2026-34986 National Vulnerability Database (NVD) · captured 23 minutes ago CVE-2026-32280 National Vulnerability Database (NVD) · captured 23 minutes ago CVE-2026-32141 National Vulnerability Database (NVD) · captured 23 minutes ago CVE-2026-1526 National Vulnerability Database (NVD) · captured 23 minutes ago CVE-2026-1528 National Vulnerability Database (NVD) · captured 23 minutes ago CVE-2026-2229 National Vulnerability Database (NVD) · captured 23 minutes ago CVE-2026-26931 National Vulnerability Database (NVD) · captured 23 minutes ago CVE-2026-32829 National Vulnerability Database (NVD) · captured 23 minutes ago CVE-2026-33186 National Vulnerability Database (NVD) · captured 23 minutes ago CVE-2026-33228 National Vulnerability Database (NVD) · captured 23 minutes ago CVE-2026-22739 National Vulnerability Database (NVD) · captured 23 minutes ago CVE-2026-1519 National Vulnerability Database (NVD) · captured 23 minutes ago CVE-2026-4800 National Vulnerability Database (NVD) · captured 23 minutes ago CVE-2026-34982 National Vulnerability Database (NVD) · captured 23 minutes ago CVE-2026-35172 National Vulnerability Database (NVD) · captured 23 minutes ago CVE-2026-29181 National Vulnerability Database (NVD) · captured 23 minutes ago CVE-2026-32283 National Vulnerability Database (NVD) · captured 23 minutes ago CVE-2025-62718 National Vulnerability Database (NVD) · captured 23 minutes ago CVE-2026-40175 National Vulnerability Database (NVD) · captured 23 minutes ago CVE-2026-42033 National Vulnerability Database (NVD) · captured 23 minutes ago CVE-2026-42039 National Vulnerability Database (NVD) · captured 23 minutes ago CVE-2026-42043 National Vulnerability Database (NVD) · captured 23 minutes ago CVE-2026-6734 National Vulnerability Database (NVD) · captured 22 minutes ago CVE-2026-12151 National Vulnerability Database (NVD) · captured 22 minutes ago CVE-2026-9697 National Vulnerability Database (NVD) · captured 22 minutes ago