Skip to content
Threat Feed
Subscribe

Tag

React-Router

1 brief RSS
medium advisory

React Router Denial of Service via Inefficient Route Matching (CVE-2026-55685)

An unauthenticated attacker can exploit CVE-2026-55685 in React Router versions 7.0.0 through 7.17.x, when used in Framework Mode applications, to cause a denial-of-service condition by repeatedly accessing the manifest endpoint, leading to heavy server load and slow response times.

react-router web-vulnerability denial-of-service npm
1t