Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2026-22029

27
FAUCET Score

CVE-2026-22029 is a medium-severity vulnerability affecting React Router and Remix, specifically versions prior to @remix-run/router 1.23.2 and react-router 7.0.0 through 7.11.0. It allows for unintended JavaScript execution due to open navigation redirects originating from untrusted content in certain operating modes. The CVSS score is 6.1 (MEDIUM), indicating a network-based attack requiring user interaction, with potential for low impact on confidentiality and integrity. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.

Impacted Technologies

VendorProductVersion(s)CPE
< 1.23.2CPE matchmatch criteria
cpe:2.3:a:shopify:remix-run\/react:*:*:*:*:*:node.js:*:*
>= 7.0.0, <= 7.11.0CPE matchmatch criteria
cpe:2.3:a:shopify:react-router:*:*:*:*:*:node.js:*:*

CVSS Data

CVSS version used by this source: 3.1

8.0HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N

Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
Exploitability Score
1.6
Impact Score
5.8
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.77%
Probability of exploitation in next 30 days
EPSS Percentile
51.9%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
This CVE's current EPSS score of 0.0077 is in the 59th percentile among its peer group of 26,236 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (97)

npmpatch availablevia ghsa
Product: react-routerFixed in: 7.12.0
npmpatch availablevia ghsa
Product: @remix-run/routerFixed in: 1.23.2
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.14Fixed in: rhacm2/console-rhel9:sha256:bf756d26032a4ed740c7e2dd969b84a1ef3e4f24367110ff6a96dedf29ca4f04
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Security 4.8Fixed in: advanced-cluster-security/rhacs-main-rhel8:sha256:f96217aeff1a39024700537986dca70ce7e94949c91c3da815dc715ef6588044
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Security 4.9Fixed in: advanced-cluster-security/rhacs-main-rhel8:sha256:e87ce042d9afb90c643de99cfaa98314230a2d9a01ad1230cd0596413991f4f5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Security 4.9Fixed in: advanced-cluster-security/rhacs-main-rhel8:sha256:25bb4a371c5656d01a53060df46b7fbb5a287fe843c08581be69fb42ff5ec5dd
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Discovery 2Fixed in: discovery/discovery-ui-rhel9:sha256:95d6b321323773a5a465ef2e83aafd2937cb4b5fe48bd81c7f8996b3b52702ae
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Dev Spaces (RHOSDS) 3.26Fixed in: devspaces/dashboard-rhel9:sha256:998779815c5a7888b80f635b942a7409733a839f4c7253a7b5ff920129f987ea
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Service Mesh 3Fixed in: openshift-service-mesh/kiali-ossmc-rhel9:sha256:19c44dfb277123122abafc25552fe408ea7ad6dc026aa592f53e3a754ca0a44f
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Service Mesh 3Fixed in: openshift-service-mesh/kiali-rhel9:sha256:6300ec1cc673e8eb40333fe98e69845c995116a5c4c80cf37f78209fc3ad1883
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Service Mesh 3.1Fixed in: openshift-service-mesh/kiali-ossmc-rhel9:sha256:e5a71ca768b96c827dd2fd860cbd739d7743f1eeb89b2e4c7cc9157941683626
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Service Mesh 3.1Fixed in: openshift-service-mesh/kiali-rhel9:sha256:2cdf4960ec57c4971d2f9ce92b07686831e6f55e24c9b1a2831470f8da05b598
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Service Mesh 3.2Fixed in: openshift-service-mesh/kiali-ossmc-rhel9:sha256:fcb5d2c8e4ae372cb0009dc15d46eb5a10163139b61b063115c3d3fce90265e1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Service Mesh 3.2Fixed in: openshift-service-mesh/kiali-rhel9:sha256:ced99993701c64b69f412c0ef9991a8d6d38ee1c8520330c4ac999addbb3bbbe
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Trusted Artifact Signer 1.3Fixed in: rhtas/rhtas-console-ui-rhel9:sha256:e7ee88dd498d337304db3d90f4f352e55114475dbc9d75c3b18a49a249492b1e
View patch
github_advisoryvendor investigatingvia nvd_reference
View patch
redhatno patchvia redhat_api
Product: Red Hat Openshift Data Foundation 4Fixed in: odf4/odf-multicluster-console-rhel9
redhatno patchvia redhat_api
Product: Red Hat Edge Manager previewFixed in: rhacm2/acm-flightctl-ocp-ui-rhel9
redhatno patchvia redhat_api
Product: Red Hat Edge Manager previewFixed in: rhacm2/acm-flightctl-ui-rhel9
redhatno patchvia redhat_api
Product: Red Hat Edge Manager previewFixed in: rhem/flightctl-alert-exporter-rhel9
redhatno patchvia redhat_api
Product: Red Hat Edge Manager previewFixed in: rhem/flightctl-alertmanager-proxy-rhel9
redhatno patchvia redhat_api
Product: Red Hat Edge Manager previewFixed in: rhem/flightctl-api-rhel9
redhatno patchvia redhat_api
Product: Red Hat Edge Manager previewFixed in: rhem/flightctl-cli-artifacts-rhel9
redhatno patchvia redhat_api
Product: Red Hat Edge Manager previewFixed in: rhem/flightctl-db-setup-rhel9
redhatno patchvia redhat_api
Product: Red Hat Edge Manager previewFixed in: rhem/flightctl-periodic-rhel9
redhatno patchvia redhat_api
Product: Red Hat Edge Manager previewFixed in: rhem/flightctl-telemetry-gateway-rhel9
redhatno patchvia redhat_api
Product: Red Hat Edge Manager previewFixed in: rhem/flightctl-ui-ocp-rhel9
redhatno patchvia redhat_api
Product: Red Hat Edge Manager previewFixed in: rhem/flightctl-ui-rhel9
redhatno patchvia redhat_api
Product: Red Hat Edge Manager previewFixed in: rhem/flightctl-userinfo-proxy-rhel9
redhatno patchvia redhat_api
Product: Red Hat Edge Manager previewFixed in: rhem/flightctl-worker-rhel9
redhatno patchvia redhat_api
Product: Red Hat OpenShift AI (RHOAI)Fixed in: rhoai/odh-dashboard-rhel8
redhatno patchvia redhat_api
Product: Red Hat OpenShift AI (RHOAI)Fixed in: rhoai/odh-dashboard-rhel9
redhatno patchvia redhat_api
Product: Red Hat OpenShift AI (RHOAI)Fixed in: rhoai/odh-mod-arch-gen-ai-rhel9
redhatno patchvia redhat_api
Product: Red Hat OpenShift AI (RHOAI)Fixed in: rhoai/odh-mod-arch-model-registry-rhel9
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/nmstate-console-plugin-rhel9
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-agent-installer-ui-rhel9
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-networking-console-plugin-rhel9
redhatno patchvia redhat_api
Product: Red Hat Openshift Data Foundation 4Fixed in: odf4/ocs-client-console-rhel9
redhatno patchvia redhat_api
Product: Red Hat Openshift Data Foundation 4Fixed in: odf4/odf-console-rhel9
redhatno patchvia redhat_api
Product: Red Hat OpenShift distributed tracing 3Fixed in: rhosdt/tempo-jaeger-query-rhel8
redhatno patchvia redhat_api
Product: Red Hat OpenShift Virtualization 4Fixed in: container-native-virtualization/kubevirt-console-plugin
redhatno patchvia redhat_api
Product: Red Hat OpenShift Virtualization 4Fixed in: container-native-virtualization/kubevirt-console-plugin-rhel9
redhatno patchvia redhat_api
Product: Red Hat Process Automation 7Fixed in: org.uberfire-uberfire-parent
redhatno patchvia redhat_api
Product: Red Hat Quay 3Fixed in: quay/quay-rhel8
redhatno patchvia redhat_api
Product: Red Hat Quay 3Fixed in: quay/quay-rhel9
redhatno patchvia redhat_api
Product: Migration Toolkit for Applications 7Fixed in: mta/mta-ui-rhel9
redhatno patchvia redhat_api
Product: Migration Toolkit for Applications 8Fixed in: mta/mta-ui-rhel9
redhatno patchvia redhat_api
Product: Migration Toolkit for ContainersFixed in: rhmtc/openshift-migration-ui-rhel8
redhatno patchvia redhat_api
Product: Multicluster Engine for KubernetesFixed in: multicluster-engine/console-mce-rhel8
redhatno patchvia redhat_api
Product: Multicluster Engine for KubernetesFixed in: multicluster-engine/console-mce-rhel9
redhatno patchvia redhat_api
Product: OpenShift LightspeedFixed in: openshift-lightspeed/lightspeed-console-plugin-pf5-rhel9
redhatno patchvia redhat_api
Product: OpenShift LightspeedFixed in: openshift-lightspeed/lightspeed-console-plugin-rhel9
redhatno patchvia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-console-plugin-rhel8
redhatno patchvia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-console-plugin-rhel9
redhatno patchvia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-hub-api-rhel8
redhatno patchvia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-hub-db-migration-rhel8
redhatno patchvia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-hub-ui-rhel8
redhatno patchvia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/acm-grafana-rhel9
redhatno patchvia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/prometheus-alertmanager-rhel9
redhatno patchvia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/prometheus-rhel9
redhatno patchvia redhat_api
Product: Red Hat Ansible Automation Platform 2Fixed in: ansible-automation-platform-26/gateway-rhel9
redhatno patchvia redhat_api
Product: Red Hat Ansible Automation Platform 2Fixed in: ansible-on-clouds/aoc-azure-aap-installer-rhel9
redhatno patchvia redhat_api
Product: Red Hat Ansible Automation Platform 2Fixed in: automation-gateway
redhatno patchvia redhat_api
Product: Red Hat Ansible Automation Platform 2Fixed in: automation-platform-ui
redhatno patchvia redhat_api
Product: Red Hat build of Apicurio Registry 2Fixed in: io.apicurio-apicurio-registry
redhatno patchvia redhat_api
Product: Red Hat Data Grid 8Fixed in: org.infinispan-infinispan-console
redhatno patchvia redhat_api
Product: Red Hat Developer HubFixed in: rhdh/rhdh-hub-rhel9
redhatno patchvia redhat_api
Product: Red Hat Edge Manager 1Fixed in: rhem/flightctl-ui-ocp-rhel9
redhatno patchvia redhat_api
Product: Red Hat Edge Manager 1Fixed in: rhem/flightctl-ui-rhel9
redhatend of lifevia redhat_api
Product: Logging Subsystem for Red Hat OpenShiftFixed in: openshift-logging/elasticsearch-proxy-rhel9
redhatend of lifevia redhat_api
Product: Logging Subsystem for Red Hat OpenShiftFixed in: openshift-logging/elasticsearch-rhel9-operator
redhatend of lifevia redhat_api
Product: Logging Subsystem for Red Hat OpenShiftFixed in: openshift-logging/kibana6-rhel8
redhatend of lifevia redhat_api
Product: Logging Subsystem for Red Hat OpenShiftFixed in: openshift-logging/logging-curator5-rhel9
redhatend of lifevia redhat_api
Product: Logging Subsystem for Red Hat OpenShiftFixed in: openshift-logging/logging-view-plugin-rhel9
redhatend of lifevia redhat_api
Product: Logging Subsystem for Red Hat OpenShiftFixed in: openshift-logging/logging-loki-rhel9
redhatend of lifevia redhat_api
Product: Logging Subsystem for Red Hat OpenShiftFixed in: openshift-logging/loki-operator-bundle
redhatend of lifevia redhat_api
Product: Logging Subsystem for Red Hat OpenShiftFixed in: openshift-logging/loki-rhel9-operator
redhatend of lifevia redhat_api
Product: Logging Subsystem for Red Hat OpenShiftFixed in: openshift-logging/lokistack-gateway-rhel9
redhatend of lifevia redhat_api
Product: Logging Subsystem for Red Hat OpenShiftFixed in: openshift-logging/opa-openshift-rhel9
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-console
redhatend of lifevia redhat_api
Product: Red Hat Ansible Automation Platform 2Fixed in: ansible-automation-platform-25/aap-cloud-ui-rhel8
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-console-rhel9
redhatend of lifevia redhat_api
Product: Migration Toolkit for VirtualizationFixed in: migration-toolkit-virtualization/mtv-console-plugin-rhel9
redhatend of lifevia redhat_api
Product: Migration Toolkit for VirtualizationFixed in: mtv-candidate/mtv-console-plugin-rhel9
redhatend of lifevia redhat_api
Product: Red Hat OpenShift GitOpsFixed in: openshift-gitops-1/console-plugin-rhel8
redhatend of lifevia redhat_api
Product: Red Hat Fuse 7Fixed in: io.syndesis-syndesis-parent
redhatend of lifevia redhat_api
Product: Red Hat Ansible Automation Platform 2Fixed in: automation-hub
redhatend of lifevia redhat_api
Product: Red Hat OpenShift GitOpsFixed in: openshift-gitops-1/gitops-operator-bundle
redhatend of lifevia redhat_api
Product: Red Hat Ansible Automation Platform 2Fixed in: python3.11-galaxy-ng
redhatend of lifevia redhat_api
Product: Logging Subsystem for Red Hat OpenShiftFixed in: openshift-logging/elasticsearch6-rhel9
redhatend of lifevia redhat_api
Product: Red Hat Connectivity Link 1Fixed in: rhcl-1/rhcl-console-plugin-rhel9
redhatend of lifevia redhat_api
Product: Logging Subsystem for Red Hat OpenShiftFixed in: openshift-logging/elasticsearch-operator-bundle
redhatend of lifevia redhat_api
Product: Red Hat Single Sign-On 7Fixed in: org.keycloak-keycloak-parent
redhatend of lifevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/acm-flightctl-ocp-ui-rhel9
redhatend of lifevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/acm-flightctl-ui-rhel9
redhatend of lifevia redhat_api
Product: Red Hat OpenShift GitOpsFixed in: openshift-gitops-1/argocd-rhel8
redhatend of lifevia redhat_api
Product: Red Hat OpenShift GitOpsFixed in: openshift-gitops-1/argocd-rhel9

Vendor Advisories (2)

redhatCVE-2026-22029Important

@remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects

Jan 10, 2026
npmGHSA-2w69-qvjg-hvjxhigh

React Router vulnerable to XSS via Open Redirects

Jan 8, 2026

References

access.redhat.com / errata/RHSA-2026:13542
access.redhat.com / errata/RHSA-2026:13548
access.redhat.com / errata/RHSA-2026:1517
access.redhat.com / errata/RHSA-2026:17468
access.redhat.com / errata/RHSA-2026:17469
access.redhat.com / errata/RHSA-2026:17474
access.redhat.com / errata/RHSA-2026:19712
access.redhat.com / errata/RHSA-2026:20041
access.redhat.com / errata/RHSA-2026:20042
access.redhat.com / errata/RHSA-2026:2147
access.redhat.com / errata/RHSA-2026:2148
access.redhat.com / errata/RHSA-2026:2149
access.redhat.com / errata/RHSA-2026:21658
access.redhat.com / errata/RHSA-2026:2350
access.redhat.com / errata/RHSA-2026:2456
access.redhat.com / errata/RHSA-2026:2568
access.redhat.com / errata/RHSA-2026:2572
access.redhat.com / errata/RHSA-2026:26413
access.redhat.com / errata/RHSA-2026:26420
access.redhat.com / errata/RHSA-2026:2694
access.redhat.com / errata/RHSA-2026:3087
access.redhat.com / errata/RHSA-2026:34100
access.redhat.com / errata/RHSA-2026:36651
access.redhat.com / errata/RHSA-2026:36882
access.redhat.com / errata/RHSA-2026:3782
access.redhat.com / errata/RHSA-2026:3958
access.redhat.com / errata/RHSA-2026:3959
access.redhat.com / errata/RHSA-2026:3960
access.redhat.com / errata/RHSA-2026:40118
access.redhat.com / errata/RHSA-2026:40945
access.redhat.com / errata/RHSA-2026:40984
access.redhat.com / errata/RHSA-2026:41064
access.redhat.com / errata/RHSA-2026:41928
access.redhat.com / errata/RHSA-2026:5633
access.redhat.com / errata/RHSA-2026:5636
access.redhat.com / errata/RHSA-2026:8218
access.redhat.com / errata/RHSA-2026:8229
access.redhat.com / errata/RHSA-2026:9848
access.redhat.com / security/cve/CVE-2026-22029
bugzilla.redhat.com / show_bug.cgi
security.access.redhat.com / data/csaf/v2/vex/2026/cve-2026-22029.json
github.com / remix-run/react-router/security/advisories/GHSA-2w69-qvjg-hvjx
Vendor Advisory