CVE-2025-68470

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-68470
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-68470.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-68470
Aliases
Published
2026-01-10T02:39:41.078Z
Modified
2026-04-10T05:35:07.141412Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
Summary
React Router has unexpected external redirect via untrusted paths
Details

React Router is a router for React. In versions 6.0.0 through 6.30.1 and 7.0.0 through 7.9.5, an attacker-supplied path can be crafted so that when a React Router application navigates to it via navigate(), <Link>, or redirect(), the app performs a navigation/redirect to an external URL. This is only an issue if you are passing untrusted content into navigation paths in your application code. This issue has been patched in versions 6.30.2 and 7.9.6.

Database specific 
{
    "cwe_ids": [
        "CWE-601"
    ],
    "cna_assigner": "GitHub_M",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68470.json"
}
References

Affected packages

Git / github.com/remix-run/react-router

Affected ranges

Type
GIT
Repo
https://github.com/remix-run/react-router
Events
Introduced
e8e3b004d94a949372e77ce97a543bff5bc6fb89
Fixed
e75da95e16ecf625f4e3bbc864b1a0a5202052c2
Database specific 
{
    "versions": [
        {
            "introduced": "7.0.0"
        },
        {
            "fixed": "7.9.6"
        }
    ]
}
Type
GIT
Repo
https://github.com/remix-run/react-router
Events
Introduced
d85c049b22670a691e2ce6d4d6009c2b6aef4933
Fixed
26b5d4581fb2829dc7eaeaad413de4735173a6eb
Database specific 
{
    "versions": [
        {
            "introduced": "6.0.0"
        },
        {
            "fixed": "6.30.2"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-68470.json"