Logo
Retour à la veille

CVE-2026-55685

Publié : 27 juillet 2026
Modifié : 27 juillet 2026
Lien officiel NVD

Description détaillée

React Router is a router for React. In versions 7.0.0 through 7.17.0, the manifest endpoint could be accessed via unauthenticated targeted requests that would put heavy load on the server and slow down response times. This issue is a follow up to CVE-2026-42342, and does not does not impact React Router applications using Declarative Mode (<BrowserRouter>) or Data Mode (createBrowserRouter/<RouterProvider>). This issue has been fixed in version 7.18.0.

Références et Patchs

https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7180https://github.com/remix-run/react-router/commit/09e6020d1950e54f361f7ad00938ecd4dde60929https://github.com/remix-run/react-router/pull/15186https://github.com/remix-run/react-router/releases/tag/react-router@7.18.0https://github.com/remix-run/react-router/security/advisories/GHSA-8x6r-g9mw-2r78https://github.com/remix-run/react-router/security/advisories/GHSA-chx6-hx7r-mcp5

Dernières Vulnérabilités

CVE-2026-66473

Unauthenticated Broken Access Control in Xendit Payment <= 7.1.0 versions.

VOIR DÉTAILS

CVE-2026-65448

Unauthenticated Cross Site Scripting (XSS) in Anti Spam and list cleaner &#8211; AcyChecker <= 1.8.1 versions.

VOIR DÉTAILS

CVE-2026-65447

Unauthenticated Cross Site Scripting (XSS) in Contest Gallery <= 30.0.6 versions.

VOIR DÉTAILS