Reflected cross-site scripting (XSS) In react-router
Description
React Router vulnerable to XSS in unstable RSC redirect handling via javascript: redirect targets When using React Router v7's unstable RSC APIs, there exists a potential client-side XSS issue in the RSC redirect handling if redirects are coming from untrusted sources
[!NOTE] This only impacts your application if you are using the unstable RSC APIs in React Router.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 npm | 7.13.2 |
Aliases
1. 2. 3. 4. 5.
References
1.