{"vulnerability": "cve-2025-43865", "sightings": [{"uuid": "68b628e4-bb0b-40bc-959b-fde732a42df5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43865", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnm2ieuxpjk2", "content": "", "creation_timestamp": "2025-04-25T01:30:10.137691Z"}, {"uuid": "1d854668-34bb-441c-9206-291440487ff8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43865", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114396554360753835", "content": "", "creation_timestamp": "2025-04-25T03:48:13.514676Z"}, {"uuid": "5dd73cf4-fdad-4873-accf-c4e6dca17fc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43865", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnmen2uyae2y", "content": "", "creation_timestamp": "2025-04-25T04:20:06.731448Z"}, {"uuid": "54794b6b-aba6-4fb8-9163-01455ad049c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43865", "type": "seen", "source": "https://bsky.app/profile/azu.bsky.social/post/3lnozraetzy2h", "content": "", "creation_timestamp": "2025-04-26T05:43:33.515558Z"}, {"uuid": "53de9e8d-c0a1-4e80-a53e-d070781dc9be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43865", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lntma2tzys2b", "content": "", "creation_timestamp": "2025-04-28T01:24:38.069811Z"}, {"uuid": "dca66886-cb27-4709-a9cb-c99b7f61996c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-43865", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lnuiqywno22r", "content": "", "creation_timestamp": "2025-04-28T09:55:10.430202Z"}, {"uuid": "fbde3971-1208-4df8-aaf7-7e676556353d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43865", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3madzvrat662z", "content": "", "creation_timestamp": "2025-12-19T15:45:29.028342Z"}, {"uuid": "5c873855-0297-4511-b93a-8c8b0d98c793", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43865", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mckha7mnad2z", "content": "", "creation_timestamp": "2026-01-16T15:50:19.907135Z"}, {"uuid": "a55b671b-8d68-448e-a7c0-5bc3c66bafec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43865", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13366", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-43865\n\ud83d\udd25 CVSS Score: 8.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H)\n\ud83d\udd39 Description: React Router is a router for React. In versions on the 7.0 branch prior to version 7.5.2, it's possible to modify pre-rendered data by adding a header to the request. This allows to completely spoof its contents and modify all the values \u200b\u200bof the data object passed to the HTML. This issue has been patched in version 7.5.2.\n\ud83d\udccf Published: 2025-04-25T00:18:53.222Z\n\ud83d\udccf Modified: 2025-04-25T00:18:53.222Z\n\ud83d\udd17 References:\n1. https://github.com/remix-run/react-router/security/advisories/GHSA-cpj6-fhp6-mr6j\n2. https://github.com/remix-run/react-router/commit/c84302972a152d851cf5dd859ff332b354b70111\n3. https://github.com/remix-run/react-router/blob/e6c53a0130559b4a9bd47f9cf76ea5b08a69868a/packages/react-router/lib/server-runtime/routes.ts#L87", "creation_timestamp": "2025-04-25T01:10:55.000000Z"}, {"uuid": "435ffc74-a581-48fb-9496-9d2d8a3e98a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43865", "type": "seen", "source": "https://t.me/cvedetector/23722", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-43865 - React Router HTTP Header Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-43865 \nPublished : April 25, 2025, 1:15 a.m. | 1\u00a0hour, 29\u00a0minutes ago \nDescription : React Router is a router for React. In versions on the 7.0 branch prior to version 7.5.2, it's possible to modify pre-rendered data by adding a header to the request. This allows to completely spoof its contents and modify all the values \u200b\u200bof the data object passed to the HTML. This issue has been patched in version 7.5.2. \nSeverity: 8.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-25T04:58:32.000000Z"}, {"uuid": "15de7fa2-66dd-4fff-9a68-ff8611b67f75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43865", "type": "published-proof-of-concept", "source": "Telegram/6FX2IebycktZzQVQqd5RFhAkDCZpjEYMsyZyU71AztwjdDiy", "content": "", "creation_timestamp": "2025-04-28T06:04:02.000000Z"}, {"uuid": "d91fc631-2d0a-46d9-a75a-758ab10e5d63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43865", "type": "published-proof-of-concept", "source": "Telegram/oGnFJdmXUCqYx0_xYR0D8dpnhpl9VxD3P3IPRWVfgfpPSsY", "content": "", "creation_timestamp": "2025-04-25T03:30:33.000000Z"}, {"uuid": "94e6330a-fe89-41fb-a7a0-5d2ede813e54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43865", "type": "published-proof-of-concept", "source": "Telegram/hwxTPI13zjfOP4QVdjfyo4btTJ66KygK04v-mdNXcVwmgy0", "content": "", "creation_timestamp": "2025-04-28T09:00:07.000000Z"}, {"uuid": "73671ca9-34eb-45b6-8d8f-1a735782df2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-43865", "type": "published-proof-of-concept", "source": "https://github.com/remix-run/react-router/security/advisories/GHSA-cpj6-fhp6-mr6j", "content": "", "creation_timestamp": "2025-04-24T14:55:19.000000Z"}, {"uuid": "525709ea-ed1b-4340-969b-c8f4df475d79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43865", "type": "seen", "source": "https://t.me/pphm_HackerNews/371", "content": "Newly Found Security Risks Impact Popular React Framework\n\nTwo high-severity vulnerabilities have been identified in React Router, a widely used routing library for React applications. These vulnerabilities, tracked as CVE-2025-43864 and CVE-2025-43865, affect applications running in Framework mode and pose significant risks to web application integrity and availability.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-20T22:00:04.295806Z"}, {"uuid": "85ddf2d2-9aa9-42f8-8f85-012ac83bec9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43865", "type": "seen", "source": "https://t.me/pphm_HackerNews/371", "content": "Newly Found Security Risks Impact Popular React Framework\n\nTwo high-severity vulnerabilities have been identified in React Router, a widely used routing library for React applications. These vulnerabilities, tracked as CVE-2025-43864 and CVE-2025-43865, affect applications running in Framework mode and pose significant risks to web application integrity and availability.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-21T00:00:10.535907Z"}]}