@tanstack

Products

ProductCVEsExploitedLatest
react-start21Oct 13, 2026
start-server-core21Oct 13, 2026
vue-start21Oct 13, 2026
solid-start21Oct 13, 2026
nitro-v2-vite-plugin11May 12, 2026
outer-vite-plugin11May 12, 2026
react-router11May 12, 2026
react-router-devtools11May 12, 2026
react-router-ssr-query11May 12, 2026
react-start-client11May 12, 2026
react-start-rsc11May 12, 2026
react-start-server11May 12, 2026
zod-adapter11May 12, 2026
eslint-plugin-router11May 12, 2026
eslint-plugin-start11May 12, 2026
history11May 12, 2026
vue-router-ssr-query11May 12, 2026
vue-start-client11May 12, 2026
vue-start-server11May 12, 2026
arktype-adapter11May 12, 2026
router-cli11May 12, 2026
router-core11May 12, 2026
router-devtools11May 12, 2026
router-devtools-core11May 12, 2026
router-generator11May 12, 2026
router-plugin11May 12, 2026
router-ssr-query-core11May 12, 2026
router-utils11May 12, 2026
solid-router11May 12, 2026
solid-router-devtools11May 12, 2026
solid-router-ssr-query11May 12, 2026
solid-start-client11May 12, 2026
solid-start-server11May 12, 2026
start-client-core11May 12, 2026
start-fn-stubs11May 12, 2026
start-plugin-core11May 12, 2026
start-static-server-functions11May 12, 2026
start-storage-context11May 12, 2026
valibot-adapter11May 12, 2026
virtual-file-routes11May 12, 2026
vue-router11May 12, 2026
vue-router-devtools11May 12, 2026
router1–Oct 13, 2026
db1–Jul 13, 2026
devtools-vite1–Aug 24, 2026
query1–Jan 30, 2024

Exploited and recent CVEs

  • CVE-2026-45321 Critical 9.6 Exploited Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys 3.3%
  • CVE-2026-45321 Critical 9.6 Exploited Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys 3.3%
  • CVE-2026-45321 Critical 9.6 Exploited Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys 3.3%
  • CVE-2026-45321 Critical 9.6 Exploited Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys 3.3%
  • CVE-2026-45321 Critical 9.6 Exploited Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys 3.3%
  • CVE-2026-45321 Critical 9.6 Exploited Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys 3.3%
  • CVE-2026-45321 Critical 9.6 Exploited Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys 3.3%
  • CVE-2026-45321 Critical 9.6 Exploited Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys 3.3%
  • CVE-2026-45321 Critical 9.6 Exploited Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys 3.3%
  • CVE-2026-45321 Critical 9.6 Exploited Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys 3.3%
  • CVE-2026-45321 Critical 9.6 Exploited Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys 3.3%
  • CVE-2026-45321 Critical 9.6 Exploited Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys 3.3%
  • CVE-2026-45321 Critical 9.6 Exploited Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys 3.3%
  • CVE-2026-45321 Critical 9.6 Exploited Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys 3.3%
  • CVE-2026-45321 Critical 9.6 Exploited Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys 3.3%
  • CVE-2026-45321 Critical 9.6 Exploited Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys 3.3%
  • CVE-2026-45321 Critical 9.6 Exploited Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys 3.3%
  • CVE-2026-45321 Critical 9.6 Exploited Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys 3.3%
  • CVE-2026-45321 Critical 9.6 Exploited Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys 3.3%
  • CVE-2026-45321 Critical 9.6 Exploited Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys 3.3%
  • CVE-2026-45321 Critical 9.6 Exploited Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys 3.3%
  • CVE-2026-45321 Critical 9.6 Exploited Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys 3.3%
  • CVE-2026-45321 Critical 9.6 Exploited Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys 3.3%
  • CVE-2026-45321 Critical 9.6 Exploited Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys 3.3%
  • CVE-2026-45321 Critical 9.6 Exploited Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys 3.3%
  • CVE-2026-45321 Critical 9.6 Exploited Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys 3.3%
  • CVE-2026-45321 Critical 9.6 Exploited Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys 3.3%
  • CVE-2026-45321 Critical 9.6 Exploited Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys 3.3%
  • CVE-2026-45321 Critical 9.6 Exploited Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys 3.3%
  • CVE-2026-45321 Critical 9.6 Exploited Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys 3.3%