Vulnerability Details CVE-2026-53669
React Router is a router for React. Versions 6.0.0 through 7.17.0 are vulnerable to Open Redirtect through use of backslashes in <Link> and useNavigate. This issue is a follow up to CVE-2025-68470 and has been fixed in version 7.18.0.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 39.7%
CVSS Severity
CVSS v3 Score 6.1
Products affected by CVE-2026-53669
-
cpe:2.3:a:shopify:react-router:6.0.0
-
cpe:2.3:a:shopify:react-router:6.0.1
-
cpe:2.3:a:shopify:react-router:6.0.2
-
cpe:2.3:a:shopify:react-router:6.1.0
-
cpe:2.3:a:shopify:react-router:6.1.1
-
cpe:2.3:a:shopify:react-router:6.10.0
-
cpe:2.3:a:shopify:react-router:6.11.0
-
cpe:2.3:a:shopify:react-router:6.11.1
-
cpe:2.3:a:shopify:react-router:6.11.2
-
cpe:2.3:a:shopify:react-router:6.12.0
-
cpe:2.3:a:shopify:react-router:6.12.1
-
cpe:2.3:a:shopify:react-router:6.12.2
-
cpe:2.3:a:shopify:react-router:6.13.0
-
cpe:2.3:a:shopify:react-router:6.14.0
-
cpe:2.3:a:shopify:react-router:6.14.1
-
cpe:2.3:a:shopify:react-router:6.14.2
-
cpe:2.3:a:shopify:react-router:6.15.0
-
cpe:2.3:a:shopify:react-router:6.16.0
-
cpe:2.3:a:shopify:react-router:6.17.0
-
cpe:2.3:a:shopify:react-router:6.18.0
-
cpe:2.3:a:shopify:react-router:6.19.0
-
cpe:2.3:a:shopify:react-router:6.2.0
-
cpe:2.3:a:shopify:react-router:6.2.1
-
cpe:2.3:a:shopify:react-router:6.2.2
-
cpe:2.3:a:shopify:react-router:6.20.0
-
cpe:2.3:a:shopify:react-router:6.20.1
-
cpe:2.3:a:shopify:react-router:6.21.0
-
cpe:2.3:a:shopify:react-router:6.21.1
-
cpe:2.3:a:shopify:react-router:6.21.2
-
cpe:2.3:a:shopify:react-router:6.21.3
-
cpe:2.3:a:shopify:react-router:6.22.0
-
cpe:2.3:a:shopify:react-router:6.22.1
-
cpe:2.3:a:shopify:react-router:6.22.2
-
cpe:2.3:a:shopify:react-router:6.22.3
-
cpe:2.3:a:shopify:react-router:6.23.0
-
cpe:2.3:a:shopify:react-router:6.23.1
-
cpe:2.3:a:shopify:react-router:6.24.0
-
cpe:2.3:a:shopify:react-router:6.24.1
-
cpe:2.3:a:shopify:react-router:6.25.0
-
cpe:2.3:a:shopify:react-router:6.25.1
-
cpe:2.3:a:shopify:react-router:6.26.0
-
cpe:2.3:a:shopify:react-router:6.26.1
-
cpe:2.3:a:shopify:react-router:6.26.2
-
cpe:2.3:a:shopify:react-router:6.27.0
-
cpe:2.3:a:shopify:react-router:6.28.0
-
cpe:2.3:a:shopify:react-router:6.28.1
-
cpe:2.3:a:shopify:react-router:6.28.2
-
cpe:2.3:a:shopify:react-router:6.28.3
-
cpe:2.3:a:shopify:react-router:6.29.0
-
cpe:2.3:a:shopify:react-router:6.3.0
-
cpe:2.3:a:shopify:react-router:6.30.0
-
cpe:2.3:a:shopify:react-router:6.30.1
-
cpe:2.3:a:shopify:react-router:6.30.2
-
cpe:2.3:a:shopify:react-router:6.30.3
-
cpe:2.3:a:shopify:react-router:6.30.4
-
cpe:2.3:a:shopify:react-router:6.4.0
-
cpe:2.3:a:shopify:react-router:6.4.1
-
cpe:2.3:a:shopify:react-router:6.4.2
-
cpe:2.3:a:shopify:react-router:6.4.3
-
cpe:2.3:a:shopify:react-router:6.4.4
-
cpe:2.3:a:shopify:react-router:6.4.5
-
cpe:2.3:a:shopify:react-router:6.5.0
-
cpe:2.3:a:shopify:react-router:6.6.0
-
cpe:2.3:a:shopify:react-router:6.6.1
-
cpe:2.3:a:shopify:react-router:6.6.2
-
cpe:2.3:a:shopify:react-router:6.6.3
-
cpe:2.3:a:shopify:react-router:6.7.0
-
cpe:2.3:a:shopify:react-router:6.7.1
-
cpe:2.3:a:shopify:react-router:6.8.0
-
cpe:2.3:a:shopify:react-router:6.8.1
-
cpe:2.3:a:shopify:react-router:6.8.2
-
cpe:2.3:a:shopify:react-router:6.9.0
-
cpe:2.3:a:shopify:react-router:7.0.0
-
cpe:2.3:a:shopify:react-router:7.0.1
-
cpe:2.3:a:shopify:react-router:7.0.2
-
cpe:2.3:a:shopify:react-router:7.1.0
-
cpe:2.3:a:shopify:react-router:7.1.1
-
cpe:2.3:a:shopify:react-router:7.1.2
-
cpe:2.3:a:shopify:react-router:7.1.3
-
cpe:2.3:a:shopify:react-router:7.1.4
-
cpe:2.3:a:shopify:react-router:7.1.5
-
cpe:2.3:a:shopify:react-router:7.10.0
-
cpe:2.3:a:shopify:react-router:7.10.1
-
cpe:2.3:a:shopify:react-router:7.11.0
-
cpe:2.3:a:shopify:react-router:7.12.0
-
cpe:2.3:a:shopify:react-router:7.13.0
-
cpe:2.3:a:shopify:react-router:7.13.1
-
cpe:2.3:a:shopify:react-router:7.13.2
-
cpe:2.3:a:shopify:react-router:7.14.0
-
cpe:2.3:a:shopify:react-router:7.14.1
-
cpe:2.3:a:shopify:react-router:7.14.2
-
cpe:2.3:a:shopify:react-router:7.15.0
-
cpe:2.3:a:shopify:react-router:7.15.1
-
cpe:2.3:a:shopify:react-router:7.16.0
-
cpe:2.3:a:shopify:react-router:7.17.0
-
cpe:2.3:a:shopify:react-router:7.2.0
-
cpe:2.3:a:shopify:react-router:7.3.0
-
cpe:2.3:a:shopify:react-router:7.4.0
-
cpe:2.3:a:shopify:react-router:7.4.1
-
cpe:2.3:a:shopify:react-router:7.5.0
-
cpe:2.3:a:shopify:react-router:7.5.1
-
cpe:2.3:a:shopify:react-router:7.5.2
-
cpe:2.3:a:shopify:react-router:7.5.3
-
cpe:2.3:a:shopify:react-router:7.6.0
-
cpe:2.3:a:shopify:react-router:7.6.1
-
cpe:2.3:a:shopify:react-router:7.6.2
-
cpe:2.3:a:shopify:react-router:7.6.3
-
cpe:2.3:a:shopify:react-router:7.7.0
-
cpe:2.3:a:shopify:react-router:7.7.1
-
cpe:2.3:a:shopify:react-router:7.8.0
-
cpe:2.3:a:shopify:react-router:7.8.1
-
cpe:2.3:a:shopify:react-router:7.8.2
-
cpe:2.3:a:shopify:react-router:7.9.0
-
cpe:2.3:a:shopify:react-router:7.9.1
-
cpe:2.3:a:shopify:react-router:7.9.2
-
cpe:2.3:a:shopify:react-router:7.9.3
-
cpe:2.3:a:shopify:react-router:7.9.4
-
cpe:2.3:a:shopify:react-router:7.9.5
-
cpe:2.3:a:shopify:react-router:7.9.6