SO
Product
solid-start
by @tanstack · last CVE Oct 13, 2026
On CISA KEVExploited in the wildRansomware-linked
2
CVEs
1
On KEV
9.6
Max CVSS
1
New 30D
Severity mix
Critical 2High 0Medium 0Low 0
Watch

Add solid-start to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-45321
RansomwareIn wildKEV
9.6
3%
May 12
Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys
Affected: 1.167.65; 1.167.68
Showing 1