[ Vendor · 4 CVEs ]
TanStack
CVEs affecting TanStack published in the last 30 days, plus any TanStack CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-102989 | 13 Oct 2026 | CVSS 9.3 | TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responsesTanStack Router is a client-first, server-capable, fully type-safe router and full-stack framework for the web. From 1.143.12 until 1.169.39 for… | Fix |
| CVE-2026-102989 | 13 Oct 2026 | CVSS 9.3 | TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responsesTanStack Router is a client-first, server-capable, fully type-safe router and full-stack framework for the web. From 1.143.12 until 1.169.39 for… | Fix |
| CVE-2026-45321 | 12 May 2026 | CVSS 9.6 | TanStack UnspecifiedOn 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @tanstack/* packages were published to the npm registry… | Exploited |
| CVE-2026-45321 | 12 May 2026 | CVSS 9.6 | TanStack UnspecifiedOn 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @tanstack/* packages were published to the npm registry… | Exploited |