-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from two unescaped JSON injections in HydrationStreamProvider.tsx:
idJSON variable was created with plain JSON.stringifyserializedCacheArgs was directly injected into the script payloadThese were both fixed by wrapping with htmlEscapeJsonString. The function's responsibility for generating hydration scripts and the lack of escaping in vulnerable versions directly matches the described XSS vulnerability pattern. The added htmlescape.ts utility and its usage in the patch confirm this was the attack vector.
JavaScriptJavaScript| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| @tanstack/react-query-next-experimental | npm | >= 5.0.0, < 5.18.0 | 5.18.0 |
Ongoing coverage of React2Shell