Most recent entries from all

certfr-2026-avi-0933 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan…

2026-10-05T03:58:05.685111+00:00

certfr-2026-avi-0933

EUVD-2026-324063

2026-10-05T03:58:05.685158+00:00

EUVD-2026-324063

fkie_cve-2026-33244

2026-10-05T03:58:05.685173+00:00

React Router is a router for React. In versions 7.5.1 through 7.13.1, when using Framework Mode with pre-rendering enabled, improper neutralization of the HTTP `Location` header value can permit Cross-Site Scripting (XSS) in the statically generated HTML files if the redirect location comes from an untrusted source. This does not impact applications using Declarative Mode (``) or Data Mode (`createBrowserRouter/`). This is patched in version 7.13.2.

GHSA-f22v-gfqf-p8f3 — React Router has stored XSS via unescaped Location header in prerendered redirect HTML

2026-10-05T03:58:05.685206+00:00

Affected: npm: react-router

When using React Router v7 [Framework Mode](https://reactrouter.com/start/modes#framework) with [Pre-rendering](https://reactrouter.com/how-to/pre-rendering) enabled, an improper neutralization of the HTTP `Location` header value can permit Cross-Site Scripting (XSS) in statically generated HTML files if the redirect location comes from an untrusted source.

> [!NOTE] > This does not impact your React Router application if you are using [Declarative Mode](https://reactrouter.com/start/modes#declarative) (``) or [Data Mode](https://reactrouter.com/start/modes#data) (`createBrowserRouter`/``).

SUSE-SU-2026:3713-1 — Security update for Multi-Linux Manager Client Tools - Monitoring stack

2026-10-05T03:58:05.685235+00:00

Security update for Multi-Linux Manager Client Tools - Monitoring stack