h3 before 2.0.1-rc.18 Open Redirect via redirectBack()

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2026-86205 · CVE overview and exploitation status

EUVD-2026-72105

GHSA-vhx4-2r84-67h4

GHSA-fp4x-ggrf-wmc6

cve-program · CVE-2026-86205

• https://github.com/h3js/h3/security/advisories/GHSA-fp4x-ggrf-wmc6
• https://www.vulncheck.com/advisories/h3-before-2.0.1-rc.18-open-redirect-via-redirectback

euvd · EUVD-2026-72105

• https://github.com/h3js/h3/security/advisories/GHSA-fp4x-ggrf-wmc6
• https://www.vulncheck.com/advisories/h3-before-2.0.1-rc.18-open-redirect-via-redirectback

nvd · CVE-2026-86205

• https://github.com/h3js/h3/security/advisories/GHSA-fp4x-ggrf-wmc6
• https://www.vulncheck.com/advisories/h3-before-2.0.1-rc.18-open-redirect-via-redirectback

osv · GHSA-fp4x-ggrf-wmc6

• https://github.com/h3js/h3/security/advisories/GHSA-fp4x-ggrf-wmc6
• https://github.com/h3js/h3/commit/459a1c6593365b0810e9c502df7c3e82837321d7
• https://github.com/h3js/h3
• https://github.com/h3js/h3/releases/tag/v2.0.1-rc.18

No related changes are available here.