[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-33245":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T11:35:27.363Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":44,"aliases":45,"duplicate_of":9,"upstream":51,"downstream":52,"duplicates":55,"related":56,"reserved_at":9,"published_at":58,"modified_at":59,"state":60,"summary":61,"references_raw":69,"kevs":94,"epss":95,"epss_history":98,"metrics":363,"affected":379},"CVE-2026-33245","React Router is a router for React. In versions 7.7.0 through 7.13.1, when using React Router's unstable React Server Components (RSC) APIs, there is a potential client-side Cross-Site Scripting (XSS) vulnerability in the RSC redirect handling if redirects come from untrusted sources. This does not impact applications that are not using the unstable RSC APIs in React Router. This is patched in version 7.13.2.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-79","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.","weakness","Stable","Base","High",[20,24,28,32,36,40],{"id":21,"name":22,"techniques":23},"CAPEC-209","XSS Using MIME Type Mismatch",[],{"id":25,"name":26,"techniques":27},"CAPEC-588","DOM-Based XSS",[],{"id":29,"name":30,"techniques":31},"CAPEC-591","Reflected XSS",[],{"id":33,"name":34,"techniques":35},"CAPEC-592","Stored XSS",[],{"id":37,"name":38,"techniques":39},"CAPEC-63","Cross-Site Scripting (XSS)",[],{"id":41,"name":42,"techniques":43},"CAPEC-85","AJAX Footprinting",[],[],[46,47,48,49,50],"GHSA-8646-j5j9-6r62","CGA-39hg-hx29-h2gp","CGA-48x7-r354-8mwq","CGA-928x-6mwj-9w8p","CGA-q9c9-7qhg-23h2",[],[53],{"_key":54},"OPENSUSE-SU-2026:11680-1",[],[57],{"_key":54},"2026-06-02T17:14:50.377Z","2026-06-03T19:09:34.483Z","Analyzed",{"cisa_kev":62,"cisa_ransomware":62,"cisa_vendor":9,"epss_severity":63,"epss_score":64,"severity":65,"severity_score":4,"severity_version":66,"severity_source":67,"severity_vector":68,"severity_status":60},false,"low",0.00189,"high","v3.1","cve.org","CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N",[70,81,85,90],{"url":71,"sources":72,"tags":76},"https://github.com/remix-run/react-router/security/advisories/GHSA-8646-j5j9-6r62",[67,73,74,75],"nvd","osv_npm","osv_chainguard",[77,78,79,80],"X Refsource CONFIRM","WEB","Vendor Advisory","Advisory",{"url":82,"sources":83,"tags":84},"https://nvd.nist.gov/vuln/detail/CVE-2026-33245",[74,75],[80],{"url":86,"sources":87,"tags":88},"https://github.com/remix-run/react-router",[74],[89],"PACKAGE",{"url":91,"sources":92,"tags":93},"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/33xxx/CVE-2026-33245.json",[75],[80],[],{"date":96,"score":64,"percentile":97},"2026-09-19",0.08761,[99,103,106,110,113,116,120,123,126,129,132,134,137,141,144,147,150,153,156,159,162,166,169,172,175,178,181,184,186,189,192,195,197,200,203,206,209,211,214,216,219,222,225,227,230,233,235,238,241,244,247,250,253,256,259,262,265,268,271,273,276,279,282,285,288,291,294,297,300,302,305,308,311,314,317,320,323,325,328,331,334,337,340,343,346,349,352,355,358,361],{"date":100,"score":101,"percentile":102},"2026-06-03",0.00033,0.0992,{"date":104,"score":101,"percentile":105},"2026-06-04",0.09933,{"date":107,"score":108,"percentile":109},"2026-06-05",0.00032,0.09851,{"date":111,"score":108,"percentile":112},"2026-06-06",0.09871,{"date":114,"score":108,"percentile":115},"2026-06-07",0.09846,{"date":117,"score":118,"percentile":119},"2026-06-08",0.00035,0.10636,{"date":121,"score":118,"percentile":122},"2026-06-09",0.10656,{"date":124,"score":118,"percentile":125},"2026-06-10",0.10692,{"date":127,"score":118,"percentile":128},"2026-06-11",0.1073,{"date":130,"score":118,"percentile":131},"2026-06-12",0.10789,{"date":133,"score":118,"percentile":131},"2026-06-13",{"date":135,"score":118,"percentile":136},"2026-06-14",0.10759,{"date":138,"score":139,"percentile":140},"2026-06-15",0.00176,0.07259,{"date":142,"score":139,"percentile":143},"2026-06-16",0.07272,{"date":145,"score":139,"percentile":146},"2026-06-17",0.07265,{"date":148,"score":139,"percentile":149},"2026-06-18",0.07256,{"date":151,"score":139,"percentile":152},"2026-06-19",0.07232,{"date":154,"score":139,"percentile":155},"2026-06-20",0.07223,{"date":157,"score":139,"percentile":158},"2026-06-21",0.07211,{"date":160,"score":139,"percentile":161},"2026-06-22",0.07188,{"date":163,"score":164,"percentile":165},"2026-06-23",0.00188,0.08533,{"date":167,"score":164,"percentile":168},"2026-06-24",0.08546,{"date":170,"score":164,"percentile":171},"2026-06-25",0.08631,{"date":173,"score":164,"percentile":174},"2026-06-26",0.08658,{"date":176,"score":164,"percentile":177},"2026-06-27",0.08681,{"date":179,"score":164,"percentile":180},"2026-06-28",0.08645,{"date":182,"score":164,"percentile":183},"2026-06-29",0.08636,{"date":185,"score":164,"percentile":183},"2026-06-30",{"date":187,"score":164,"percentile":188},"2026-07-01",0.0867,{"date":190,"score":164,"percentile":191},"2026-07-02",0.08655,{"date":193,"score":164,"percentile":194},"2026-07-03",0.0863,{"date":196,"score":164,"percentile":171},"2026-07-04",{"date":198,"score":164,"percentile":199},"2026-07-05",0.08627,{"date":201,"score":164,"percentile":202},"2026-07-06",0.08632,{"date":204,"score":164,"percentile":205},"2026-07-07",0.08625,{"date":207,"score":164,"percentile":208},"2026-07-08",0.08616,{"date":210,"score":164,"percentile":205},"2026-07-09",{"date":212,"score":164,"percentile":213},"2026-07-10",0.08622,{"date":215,"score":164,"percentile":208},"2026-07-11",{"date":217,"score":164,"percentile":218},"2026-07-12",0.08608,{"date":220,"score":164,"percentile":221},"2026-07-13",0.08603,{"date":223,"score":164,"percentile":224},"2026-07-14",0.08621,{"date":226,"score":164,"percentile":213},"2026-07-15",{"date":228,"score":164,"percentile":229},"2026-07-16",0.08629,{"date":231,"score":164,"percentile":232},"2026-07-17",0.08635,{"date":234,"score":164,"percentile":224},"2026-07-18",{"date":236,"score":164,"percentile":237},"2026-07-19",0.08615,{"date":239,"score":164,"percentile":240},"2026-07-20",0.08694,{"date":242,"score":164,"percentile":243},"2026-07-21",0.08689,{"date":245,"score":164,"percentile":246},"2026-07-22",0.08722,{"date":248,"score":164,"percentile":249},"2026-07-23",0.08692,{"date":251,"score":164,"percentile":252},"2026-07-24",0.08704,{"date":254,"score":164,"percentile":255},"2026-07-25",0.08706,{"date":257,"score":164,"percentile":258},"2026-07-26",0.08753,{"date":260,"score":164,"percentile":261},"2026-07-27",0.08736,{"date":263,"score":164,"percentile":264},"2026-07-28",0.08788,{"date":266,"score":164,"percentile":267},"2026-07-29",0.08768,{"date":269,"score":164,"percentile":270},"2026-07-30",0.08763,{"date":272,"score":164,"percentile":97},"2026-07-31",{"date":274,"score":164,"percentile":275},"2026-08-01",0.08747,{"date":277,"score":164,"percentile":278},"2026-08-02",0.08726,{"date":280,"score":164,"percentile":281},"2026-08-03",0.08721,{"date":283,"score":164,"percentile":284},"2026-08-04",0.08699,{"date":286,"score":164,"percentile":287},"2026-08-05",0.08673,{"date":289,"score":164,"percentile":290},"2026-08-06",0.08657,{"date":292,"score":164,"percentile":293},"2026-08-07",0.08652,{"date":295,"score":164,"percentile":296},"2026-08-08",0.08651,{"date":298,"score":164,"percentile":299},"2026-08-09",0.08642,{"date":301,"score":164,"percentile":191},"2026-08-10",{"date":303,"score":164,"percentile":304},"2026-08-11",0.08703,{"date":306,"score":164,"percentile":307},"2026-08-12",0.08716,{"date":309,"score":164,"percentile":310},"2026-08-13",0.08709,{"date":312,"score":164,"percentile":313},"2026-08-14",0.08719,{"date":315,"score":164,"percentile":316},"2026-08-15",0.08744,{"date":318,"score":164,"percentile":319},"2026-08-16",0.08773,{"date":321,"score":164,"percentile":322},"2026-08-17",0.08785,{"date":324,"score":164,"percentile":322},"2026-08-18",{"date":326,"score":164,"percentile":327},"2026-08-19",0.08825,{"date":329,"score":164,"percentile":330},"2026-08-20",0.0882,{"date":332,"score":164,"percentile":333},"2026-08-21",0.08796,{"date":335,"score":164,"percentile":336},"2026-08-22",0.08795,{"date":338,"score":164,"percentile":339},"2026-08-23",0.0876,{"date":341,"score":164,"percentile":342},"2026-08-24",0.0846,{"date":344,"score":164,"percentile":345},"2026-08-25",0.08461,{"date":347,"score":164,"percentile":348},"2026-08-26",0.08488,{"date":350,"score":164,"percentile":351},"2026-08-27",0.08486,{"date":353,"score":164,"percentile":354},"2026-08-28",0.08496,{"date":356,"score":164,"percentile":357},"2026-08-29",0.085,{"date":359,"score":164,"percentile":360},"2026-08-30",0.08513,{"date":362,"score":164,"percentile":360},"2026-08-31",[364,369,375,377],{"source":67,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":365,"cvss_v4_0":9},{"baseScore":4,"baseSeverity":366,"vectorString":68,"impactScore":367,"exploitabilityScore":368},"HIGH",9.7,4.1,{"source":73,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":370,"cvss_v4_0":9},{"baseScore":371,"baseSeverity":372,"vectorString":373,"impactScore":374,"exploitabilityScore":368},4.7,"MEDIUM","CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N",4.5,{"source":74,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":376,"cvss_v4_0":9},{"baseScore":4,"baseSeverity":9,"vectorString":68,"impactScore":367,"exploitabilityScore":368},{"source":75,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":378,"cvss_v4_0":9},{"baseScore":4,"baseSeverity":9,"vectorString":68,"impactScore":367,"exploitabilityScore":368},[380,390,394,406,412],{"ecosystem":381,"name":382,"vendor":383,"product":382,"cpe_part":9,"purl_type":384,"purl_namespace":383,"purl_name":382,"source":9,"versions":385},"Chainguard","airflow-2","chainguard","apk",[386],{"version":387,"is_range":388,"range_type":389,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"all",true,"ecosystem",{"ecosystem":381,"name":391,"vendor":383,"product":391,"cpe_part":9,"purl_type":384,"purl_namespace":383,"purl_name":391,"source":9,"versions":392},"airflow-core-2",[393],{"version":387,"is_range":388,"range_type":389,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":395,"name":396,"vendor":395,"product":396,"cpe_part":9,"purl_type":397,"purl_namespace":9,"purl_name":396,"source":9,"versions":398},"Npm","react-router","npm",[399],{"version":400,"is_range":388,"range_type":401,"version_start":402,"version_start_type":403,"version_end":404,"version_end_type":405,"fixed_in":9},"gte7_7_0_lt7_13_2","semver","7.7.0","including","7.13.2","excluding",{"ecosystem":9,"name":396,"vendor":407,"product":396,"cpe_part":408,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":409},"remix-run","a",[410],{"version":411,"is_range":388,"range_type":67,"version_start":402,"version_start_type":403,"version_end":404,"version_end_type":405,"fixed_in":9},">= 7.7.0, \u003C 7.13.2",{"ecosystem":9,"name":396,"vendor":413,"product":396,"cpe_part":408,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":414},"shopify",[415],{"version":416,"is_range":388,"range_type":417,"version_start":402,"version_start_type":403,"version_end":404,"version_end_type":405,"fixed_in":9},"gte7.7.0_lt7.13.2","cpe"]