Critical React Router Vulnerabilities Allow Server File Access

Critical React Router Vulnerabilities Allow Server File Access

First seen 12 Jan 2026, 12:58 UTC •GbhackersCybersecuritynewsCyberpress •45.3

Article Content

Browse articles
ThreatCluster

Security researchers have identified critical vulnerabilities in React Router that enable attackers to access or modify server files through directory traversal. These flaws impact multiple packages within the React Router ecosystem and have a CVSS v3 score of 9.8, indicating critical severity.

How this analysis works

Extracted Entities

1 / 2