CVE-2026-49456 | wakujs Waku up to 1.0.0-beta.0 Router define-router.tsx unstable_redirect

September 3, 2026 Yanac

A vulnerability identified as problematic has been detected in wakujs Waku up to 1.0.0-beta.0. The affected element is the function unstable_redirect of the file packages/waku/src/router/define-router.tsx of the component Router. Performing a manipulation results in open redirect.

This vulnerability is reported as CVE-2026-49456. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More