CVE-2026-45321 |
critical
|
9.6 |
0.0328
|
tanstack |
tanstack\/react-router |
1.169.5
|
KEV
|
CVE-2026-45321 |
critical
|
9.6 |
0.0328
|
tanstack |
tanstack\/react-router |
1.169.8
|
KEV
|
CVE-2026-45321 |
critical
|
9.6 |
0.0328
|
tanstack |
tanstack\/react-router-devtools |
1.166.16
|
KEV
|
CVE-2026-45321 |
critical
|
9.6 |
0.0328
|
tanstack |
tanstack\/react-router-devtools |
1.166.19
|
KEV
|
CVE-2026-45321 |
critical
|
9.6 |
0.0328
|
tanstack |
tanstack\/react-router-ssr-query |
1.166.15
|
KEV
|
CVE-2026-45321 |
critical
|
9.6 |
0.0328
|
tanstack |
tanstack\/react-router-ssr-query |
1.166.18
|
KEV
|
CVE-2026-45321 |
critical
|
9.6 |
0.0328
|
tanstack |
tanstack\/react-start |
1.167.68
|
KEV
|
CVE-2026-45321 |
critical
|
9.6 |
0.0328
|
tanstack |
tanstack\/react-start |
1.167.71
|
KEV
|
CVE-2026-45321 |
critical
|
9.6 |
0.0328
|
tanstack |
tanstack\/react-start-client |
1.166.51
|
KEV
|
CVE-2026-45321 |
critical
|
9.6 |
0.0328
|
tanstack |
tanstack\/react-start-client |
1.166.54
|
KEV
|
CVE-2026-45321 |
critical
|
9.6 |
0.0328
|
tanstack |
tanstack\/react-start-rsc |
0.0.47
|
KEV
|
CVE-2026-45321 |
critical
|
9.6 |
0.0328
|
tanstack |
tanstack\/react-start-rsc |
0.0.50
|
KEV
|
CVE-2026-45321 |
critical
|
9.6 |
0.0328
|
tanstack |
tanstack\/react-start-server |
1.166.55
|
KEV
|
CVE-2026-45321 |
critical
|
9.6 |
0.0328
|
tanstack |
tanstack\/react-start-server |
1.166.58
|
KEV
|
CVE-2026-45321 |
critical
|
9.6 |
0.0328
|
uipath |
uipath\/apollo-react |
4.24.5
|
KEV
|
CVE-2026-55685 |
high
|
8.7 |
0.0071
|
shopify |
react-router |
< 7.18.0
|
|
CVE-2026-42349 |
high
|
7.6 |
0.0025
|
clerk |
clerk\/clerk-react |
< 5.61.6
|
|
CVE-2026-42349 |
high
|
7.6 |
0.0025
|
clerk |
clerk\/react |
< 6.4.3
|
|
CVE-2026-42349 |
high
|
7.6 |
0.0025
|
clerk |
clerk\/react-router |
< 2.4.13
|
|
CVE-2026-42349 |
high
|
7.6 |
0.0025
|
clerk |
clerk\/react-router |
< 3.1.4
|
|
CVE-2026-42349 |
high
|
7.6 |
0.0025
|
clerk |
clerk\/tanstack-react-start |
< 0.29.11
|
|
CVE-2026-42349 |
high
|
7.6 |
0.0025
|
clerk |
clerk\/tanstack-react-start |
< 1.1.4
|
|
CVE-2026-23870 |
high
|
7.5 |
0.0153
|
facebook |
react-server-dom-parcel |
< 19.0.5
|
|
CVE-2026-23870 |
high
|
7.5 |
0.0153
|
facebook |
react-server-dom-parcel |
< 19.1.6
|
|
CVE-2026-23870 |
high
|
7.5 |
0.0153
|
facebook |
react-server-dom-parcel |
< 19.2.5
|
|
CVE-2026-23870 |
high
|
7.5 |
0.0153
|
facebook |
react-server-dom-turbopack |
< 19.0.5
|
|
CVE-2026-23870 |
high
|
7.5 |
0.0153
|
facebook |
react-server-dom-turbopack |
< 19.1.6
|
|
CVE-2026-23870 |
high
|
7.5 |
0.0153
|
facebook |
react-server-dom-turbopack |
< 19.2.5
|
|
CVE-2026-23870 |
high
|
7.5 |
0.0153
|
facebook |
react-server-dom-webpack |
< 19.0.5
|
|
CVE-2026-23870 |
high
|
7.5 |
0.0153
|
facebook |
react-server-dom-webpack |
< 19.1.6
|
|
CVE-2026-23870 |
high
|
7.5 |
0.0153
|
facebook |
react-server-dom-webpack |
< 19.2.5
|
|
CVE-2026-53668 |
medium
|
6.9 |
0.0034
|
shopify |
react-router |
< 6.30.4
|
|
CVE-2026-53668 |
medium
|
6.9 |
0.0034
|
shopify |
react-router |
< 7.13.0
|
|
CVE-2026-53666 |
medium
|
6.1 |
0.0042
|
shopify |
react-router |
< 7.18.0
|
|
CVE-2026-53667 |
medium
|
6.1 |
0.0036
|
shopify |
react-router |
< 7.18.0
|
|
CVE-2026-53669 |
medium
|
5.1 |
0.0032
|
shopify |
react-router |
< 7.18.0
|
|
CVE-2025-55182 |
—
|
— |
0.9980
|
facebook |
react |
19.0.0
|
KEV
|
CVE-2025-55182 |
—
|
— |
0.9980
|
facebook |
react |
19.1.0
|
KEV
|
CVE-2025-55182 |
—
|
— |
0.9980
|
facebook |
react |
19.1.1
|
KEV
|
CVE-2025-55182 |
—
|
— |
0.9980
|
facebook |
react |
19.2.0
|
KEV
|