CVE-2026-22029
EUVD-2026-146510.01.2026, 03:15
React Router is a router for React. In @remix-run/router version prior to 1.23.2 and react-router 7.0.0 through 7.11.0, React Router (and Remix v1/v2) SPA open navigation redirects originating from loaders or actions in Framework Mode, Data Mode, or the unstable RSC modes can result in unsafe URLs causing unintended javascript execution on the client. This is only an issue if you are creating redirect paths from untrusted content or via an open redirect. There is no impact if Declarative Mode (<BrowserRouter>) is being used. This issue has been patched in @remix-run/router version 1.23.2 and react-router version 7.12.0.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| shopify | remix-run/react | 𝑥 < 1.23.2 |
| shopify | react-router | 7.0.0 ≤ 𝑥 ≤ 7.11.0 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 8 | 0:2.5.20260225-1.el8ap ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 9 | 0:2.5.20260225-1.el9ap ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Ansible Automation Platform 2.6 for RHEL 9 | 0:2.6.6-1.el9ap ≤ 𝑥 < * | ADP |
| Red Hat | multicluster engine for Kubernetes 2.10 | 1777128790 ≤ 𝑥 < * | ADP |
| Red Hat | multicluster engine for Kubernetes 2.6 | 1776223790 ≤ 𝑥 < * | ADP |
| Red Hat | multicluster engine for Kubernetes 2.7 | 1773100128 ≤ 𝑥 < * | ADP |
| Red Hat | multicluster engine for Kubernetes 2.8 | 1775116156 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.11 | 1783350952 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.12 | 1773259174 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 | 1775116130 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.14 | 1769990632 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.14 | 1782693386 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.15 | 1776927126 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Advanced Cluster Security 4.8 | 1769615659 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Advanced Cluster Security 4.9 | 1770074713 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Advanced Cluster Security 4.9 | 1770250889 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Ansible Automation Platform 2.6 | 1772543959 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Discovery 2 | 1770913709 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.0 | 1783502765 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.0 | 1783502438 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784194938 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784194574 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784126822 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784127736 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Migration Toolkit 1.8 | 1783690532 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 2.25 | 1772093424 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 2.25 | 1772093498 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.3 | 1779189627 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.3 | 1778473763 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.3 | 1778666987 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.17 | 1782269794 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | 1779874967 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.19 | 1779256322 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.19 | 1779249920 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.20 | 1778645099 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.20 | 1778645008 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.21 | 1778539338 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | 1781555717 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | 1781554936 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | 1781555645 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | 1781556009 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | 1781558423 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | 1781555708 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | 1781557202 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | 1781555679 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | 1781557189 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | 1781556534 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | 1781556085 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | 1781555971 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | 1781557158 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | 1781556690 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | 1781558326 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | 1781556544 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | 1781556958 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | 1781556901 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | 1781557496 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.19 | 1781550255 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.19 | 1781554417 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.19 | 1781550415 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.19 | 1781550593 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.19 | 1781551060 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.19 | 1781550551 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.19 | 1781550615 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.19 | 1781550670 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.19 | 1781550777 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.19 | 1781550759 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.19 | 1781551276 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.19 | 1781550761 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.19 | 1781550908 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.19 | 1781550957 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.19 | 1781551499 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.19 | 1781551098 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.19 | 1781551130 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.19 | 1781551169 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.19 | 1781551235 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.19 | 1781551472 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.20 | 1783667125 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.20 | 1783666755 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.20 | 1784054598 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.20 | 1784055387 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.20 | 1784055726 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.20 | 1783667517 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.20 | 1783667577 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.20 | 1783667611 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.20 | 1784055020 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.20 | 1783667641 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.20 | 1784055586 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.20 | 1783667790 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.20 | 1783667859 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.20 | 1783667875 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.20 | 1783667869 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.20 | 1783667877 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.20 | 1784055576 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.20 | 1784055244 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.20 | 1784055382 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.20 | 1783668266 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.20 | 1783668288 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.20 | 1783669219 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Dev Spaces \(RHOSDS\) 3.26 | 1769685154 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Service Mesh 3.0 | 1770140791 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Service Mesh 3.0 | 1770140853 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Service Mesh 3.1 | 1770140180 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Service Mesh 3.1 | 1770138727 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Service Mesh 3.2 | 1770142326 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Service Mesh 3.2 | 1770138513 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.3 | 1771324807 ≤ 𝑥 < * | ADP |
References