Login Request a demo
RE
Product
react-start-rsc
by @tanstack · last CVE May 12, 2026
On CISA KEVExploited in the wildRansomware-linked
1
CVEs
1
On KEV
9.6
Max CVSS
0
New 30D
Vulnerabilities1In the news2Timeline
Severity mix
Critical 1High 0Medium 0Low 0
Severity
All severities1Critical1High0Medium0Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add react-start-rsc to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-45321
RansomwareIn wildKEV
9.6
3%
May 12
Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys
Affected: 0.0.47; 0.0.50
Showing 1