RO
Product
router-plugin
by @tanstack · last CVE May 12, 2026
On CISA KEVExploited in the wildRansomware-linked
1
CVEs
1
On KEV
9.6
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 0Low 0
Watch

Add router-plugin to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-45321
RansomwareIn wildKEV
9.6
3%
May 12
Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys
Affected: 1.167.38; 1.167.41
Showing 1