TA
Vendor
@tanstack
93
CVEs
85
On KEV
5
New 30D
Products
RE9.6
react-start
@tanstack
2 CVEs1 on KEV1 new
SO9.6
solid-start
@tanstack
2 CVEs1 on KEV1 new
ST9.6
start-server-core
@tanstack
2 CVEs1 on KEV1 new
VU9.6
vue-start
@tanstack
2 CVEs1 on KEV1 new
RO9.3
router
TanStack
1 CVEs0 on KEV1 new
AR9.6
arktype-adapter
@tanstack
1 CVEs1 on KEV0 new
ES9.6
eslint-plugin-router
@tanstack
1 CVEs1 on KEV0 new
ES9.6
eslint-plugin-start
@tanstack
1 CVEs1 on KEV0 new
HI9.6
history
@tanstack
1 CVEs1 on KEV0 new
NI9.6
nitro-v2-vite-plugin
@tanstack
1 CVEs1 on KEV0 new
OU9.6
outer-vite-plugin
@tanstack
1 CVEs1 on KEV0 new
RE9.6
react-router
@tanstack
1 CVEs1 on KEV0 new
RE9.6
react-router-devtools
@tanstack
1 CVEs1 on KEV0 new
RE9.6
react-router-ssr-query
@tanstack
1 CVEs1 on KEV0 new
RE9.6
react-start-client
@tanstack
1 CVEs1 on KEV0 new
RE9.6
react-start-rsc
@tanstack
1 CVEs1 on KEV0 new
RE9.6
react-start-server
@tanstack
1 CVEs1 on KEV0 new
RO9.6
router-cli
@tanstack
1 CVEs1 on KEV0 new
RO9.6
router-core
@tanstack
1 CVEs1 on KEV0 new
RO9.6
router-devtools
@tanstack
1 CVEs1 on KEV0 new
RO9.6
router-devtools-core
@tanstack
1 CVEs1 on KEV0 new
RO9.6
router-generator
@tanstack
1 CVEs1 on KEV0 new
RO9.6
router-plugin
@tanstack
1 CVEs1 on KEV0 new
RO9.6
router-ssr-query-core
@tanstack
1 CVEs1 on KEV0 new
RO9.6
router-utils
@tanstack
1 CVEs1 on KEV0 new
SO9.6
solid-router
@tanstack
1 CVEs1 on KEV0 new
SO9.6
solid-router-devtools
@tanstack
1 CVEs1 on KEV0 new
SO9.6
solid-router-ssr-query
@tanstack
1 CVEs1 on KEV0 new
SO9.6
solid-start-client
@tanstack
1 CVEs1 on KEV0 new
SO9.6
solid-start-server
@tanstack
1 CVEs1 on KEV0 new
ST9.6
start-client-core
@tanstack
1 CVEs1 on KEV0 new
ST9.6
start-fn-stubs
@tanstack
1 CVEs1 on KEV0 new
ST9.6
start-plugin-core
@tanstack
1 CVEs1 on KEV0 new
ST9.6
start-static-server-functions
@tanstack
1 CVEs1 on KEV0 new
ST9.6
start-storage-context
@tanstack
1 CVEs1 on KEV0 new
TA9.6
TanStack
TanStack
1 CVEs1 on KEV0 new
TA9.6
Tanstack/arktype-adapter
Tanstack
1 CVEs1 on KEV0 new
TA9.6
Tanstack/eslint-plugin-router
Tanstack
1 CVEs1 on KEV0 new
TA9.6
Tanstack/eslint-plugin-start
Tanstack
1 CVEs1 on KEV0 new
TA9.6
Tanstack/history
Tanstack
1 CVEs1 on KEV0 new
TA9.6
Tanstack/nitro-v2-vite-plugin
Tanstack
1 CVEs1 on KEV0 new
TA9.6
Tanstack/react-router
Tanstack
1 CVEs1 on KEV0 new
TA9.6
Tanstack/react-router-devtools
Tanstack
1 CVEs1 on KEV0 new
TA9.6
Tanstack/react-router-ssr-query
Tanstack
1 CVEs1 on KEV0 new
TA9.6
Tanstack/react-start
Tanstack
1 CVEs1 on KEV0 new
TA9.6
Tanstack/react-start-client
Tanstack
1 CVEs1 on KEV0 new
TA9.6
Tanstack/react-start-rsc
Tanstack
1 CVEs1 on KEV0 new
TA9.6
Tanstack/react-start-server
Tanstack
1 CVEs1 on KEV0 new
TA9.6
Tanstack/router-cli
Tanstack
1 CVEs1 on KEV0 new
TA9.6
Tanstack/router-core
Tanstack
1 CVEs1 on KEV0 new
TA9.6
Tanstack/router-devtools
Tanstack
1 CVEs1 on KEV0 new
TA9.6
Tanstack/router-devtools-core
Tanstack
1 CVEs1 on KEV0 new
TA9.6
Tanstack/router-generator
Tanstack
1 CVEs1 on KEV0 new
TA9.6
Tanstack/router-plugin
Tanstack
1 CVEs1 on KEV0 new
TA9.6
Tanstack/router-ssr-query-core
Tanstack
1 CVEs1 on KEV0 new
TA9.6
Tanstack/router-utils
Tanstack
1 CVEs1 on KEV0 new
TA9.6
Tanstack/router-vite-plugin
Tanstack
1 CVEs1 on KEV0 new
TA9.6
Tanstack/solid-router
Tanstack
1 CVEs1 on KEV0 new
TA9.6
Tanstack/solid-router-devtools
Tanstack
1 CVEs1 on KEV0 new
TA9.6
Tanstack/solid-router-ssr-query
Tanstack
1 CVEs1 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-102989 | SO solid-start @tanstack | 9.3 | Oct 13 | TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responses |
| CVE-2026-78177 | DE devtools-vite TanStack | 4.5 | Aug 24 | TanStack devtools-vite Development Devtools Event Bus package-manager.ts installPackage os command injection |
| CVE-2026-15607 | DB db tanstack | 4.3 | Jul 13 | tanstack db Alias Path select.ts select prototype pollution |
| CVE-2026-45321 RansomwareIn wildKEV | RE react-router-devtools @tanstack | 9.6 | May 12 | Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys |
| CVE-2024-24558 | RE React-query-next-experimental Tanstack | 6.1 | Jan 30 | TanStack Query supplies asynchronous state management, server-state utilities and data fetching for the web |
