@tanstack/start-server-core
npm · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responses | @tanstack/react-start@tanstack/solid-start | npm | Critical | Fix reported | |
| Malware in @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys | @tanstack/arktype-adapter@tanstack/eslint-plugin-router | npm | Critical | Fix reported | |
| TanStack Start - Server Core: Inbound server-function request deserialization could invoke a sibling client-referenced server function | @tanstack/start-server-core | npm | Medium | Fix reported |