@tanstack/react-start
npm · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responses | @tanstack/react-start@tanstack/solid-start | npm | Critical | Fix reported | |
| Malware in @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys | @tanstack/arktype-adapter@tanstack/eslint-plugin-router | npm | Critical | Fix reported |