CVE-2026-22029
React Router vulnerable to XSS via Open Redirects
CVSS Score
8.0
EPSS Score
0.0%
EPSS Percentile
0th
React Router is a router for React. In @remix-run/router version prior to 1.23.2 and react-router 7.0.0 through 7.11.0, React Router (and Remix v1/v2) SPA open navigation redirects originating from loaders or actions in Framework Mode, Data Mode, or the unstable RSC modes can result in unsafe URLs causing unintended javascript execution on the client. This is only an issue if you are creating redirect paths from untrusted content or via an open redirect. There is no impact if Declarative Mode (<BrowserRouter>) is being used. This issue has been patched in @remix-run/router version 1.23.2 and react-router version 7.12.0.
| CWE | CWE-79 |
| Vendor | remix-run |
| Product | react-router |
| Published | Jan 10, 2026 |
| Last Updated | Jul 21, 2026 |
Stay Ahead of the Next One
Get instant alerts for remix-run react-router
Be the first to know when new high vulnerabilities affecting remix-run react-router are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
Required
Scope
Changed
Confidentiality
High
Integrity
High
Availability
None
Affected Versions
remix-run / react-router
>= 7.0.0, < 7.12.0
remix-run / @remix-run/router
< 1.23.2
References
github.com: https://github.com/remix-run/react-router/security/advisories/GHSA-2w69-qvjg-hvjx access.redhat.com: https://access.redhat.com/security/cve/CVE-2026-22029 bugzilla.redhat.com: https://bugzilla.redhat.com/show_bug.cgi?id=2428412 security.access.redhat.com: https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-22029.json access.redhat.com: https://access.redhat.com/errata/RHSA-2026:3959 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:3958 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:41064 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:5633 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8229 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:36882 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:2572 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:13548 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:1517 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:2350 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:2568 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:3960 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:2694 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:36651 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:40945 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:40118 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:41928 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:3782 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19712 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:34100 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:21658 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:20042 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:20041 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:17469 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:17468 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:17474 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:2456 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:2147 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:2148 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:2149 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:26420 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:26413 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:40984 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:3087 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:13542 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:9848 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:5636 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8218