GHSA-wrjc-x8rr-h8h6

    Dashboard / Vulnerabilities / GHSA-wrjc-x8rr-h8h6

    GHSA-wrjc-x8rr-h8h6

    Published: 23 Jul 2026Last Modified: 10 Sept 2026

    Summary: React Router: Open redirect via backslash in <Link> and useNavigate (CVE-2025-68470 bypass)

    Details: This is a follow up to [CVE-2025-68470](https://github.com/remix-run/react-router/security/advisories/GHSA-9jcx-v3wj-wh4m). React Router was alerted to certain scenarios in which the fix there was incomplete so there still existed some scenarios where attacker supplied paths passed to navigation mechanisms could result in unexpected external navigations.

    References: https://github.com/remix-run/react-router/security/advisories/GHSA-wrjc-x8rr-h8h6, https://github.com/remix-run/react-router/pull/15176, https://github.com/remix-run/react-router, https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7180, https://github.com/remix-run/react-router/releases/tag/[email protected], http://github.com/remix-run/react-router/pull/15176

    Affected packages

    Package

    Name: react-router

    Purl: pkg:npm/react-router

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 6.0.0
    Fixed -7.18.0

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High