CVE-2026-86205 | h3js h3 up to 2.0.1-rc.17 Redirect Utility redirectBack

September 6, 2026 Yanac

A vulnerability marked as problematic has been reported in h3js h3 up to 2.0.1-rc.17. The impacted element is the function redirectBack of the component Redirect Utility. Performing a manipulation results in open redirect.

This vulnerability is reported as CVE-2026-86205. The attack is possible to be carried out remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More