TA
Vendor
@tanstack
89 products with CVEs on record
93
CVEs
85
On KEV
5
New 30D
Products
RE
react-start
@tanstack
9.6
2 CVEs1 on KEV1 new
SO
solid-start
@tanstack
9.6
2 CVEs1 on KEV1 new
ST
start-server-core
@tanstack
9.6
2 CVEs1 on KEV1 new
VU
vue-start
@tanstack
9.6
2 CVEs1 on KEV1 new
RO
router
TanStack
9.3
1 CVEs0 on KEV1 new
AR
arktype-adapter
@tanstack
9.6
1 CVEs1 on KEV0 new
ES
eslint-plugin-router
@tanstack
9.6
1 CVEs1 on KEV0 new
ES
eslint-plugin-start
@tanstack
9.6
1 CVEs1 on KEV0 new
HI
history
@tanstack
9.6
1 CVEs1 on KEV0 new
NI
nitro-v2-vite-plugin
@tanstack
9.6
1 CVEs1 on KEV0 new
OU
outer-vite-plugin
@tanstack
9.6
1 CVEs1 on KEV0 new
RE
react-router
@tanstack
9.6
1 CVEs1 on KEV0 new
RE
react-router-devtools
@tanstack
9.6
1 CVEs1 on KEV0 new
RE
react-router-ssr-query
@tanstack
9.6
1 CVEs1 on KEV0 new
RE
react-start-client
@tanstack
9.6
1 CVEs1 on KEV0 new
RE
react-start-rsc
@tanstack
9.6
1 CVEs1 on KEV0 new
RE
react-start-server
@tanstack
9.6
1 CVEs1 on KEV0 new
RO
router-cli
@tanstack
9.6
1 CVEs1 on KEV0 new
RO
router-core
@tanstack
9.6
1 CVEs1 on KEV0 new
RO
router-devtools
@tanstack
9.6
1 CVEs1 on KEV0 new
RO
router-devtools-core
@tanstack
9.6
1 CVEs1 on KEV0 new
RO
router-generator
@tanstack
9.6
1 CVEs1 on KEV0 new
RO
router-plugin
@tanstack
9.6
1 CVEs1 on KEV0 new
RO
router-ssr-query-core
@tanstack
9.6
1 CVEs1 on KEV0 new
RO
router-utils
@tanstack
9.6
1 CVEs1 on KEV0 new
SO
solid-router
@tanstack
9.6
1 CVEs1 on KEV0 new
SO
solid-router-devtools
@tanstack
9.6
1 CVEs1 on KEV0 new
SO
solid-router-ssr-query
@tanstack
9.6
1 CVEs1 on KEV0 new
SO
solid-start-client
@tanstack
9.6
1 CVEs1 on KEV0 new
SO
solid-start-server
@tanstack
9.6
1 CVEs1 on KEV0 new
ST
start-client-core
@tanstack
9.6
1 CVEs1 on KEV0 new
ST
start-fn-stubs
@tanstack
9.6
1 CVEs1 on KEV0 new
ST
start-plugin-core
@tanstack
9.6
1 CVEs1 on KEV0 new
ST
start-static-server-functions
@tanstack
9.6
1 CVEs1 on KEV0 new
ST
start-storage-context
@tanstack
9.6
1 CVEs1 on KEV0 new
TA
TanStack
TanStack
9.6
1 CVEs1 on KEV0 new
TA
Tanstack/arktype-adapter
Tanstack
9.6
1 CVEs1 on KEV0 new
TA
Tanstack/eslint-plugin-router
Tanstack
9.6
1 CVEs1 on KEV0 new
TA
Tanstack/eslint-plugin-start
Tanstack
9.6
1 CVEs1 on KEV0 new
TA
Tanstack/history
Tanstack
9.6
1 CVEs1 on KEV0 new
TA
Tanstack/nitro-v2-vite-plugin
Tanstack
9.6
1 CVEs1 on KEV0 new
TA
Tanstack/react-router
Tanstack
9.6
1 CVEs1 on KEV0 new
TA
Tanstack/react-router-devtools
Tanstack
9.6
1 CVEs1 on KEV0 new
TA
Tanstack/react-router-ssr-query
Tanstack
9.6
1 CVEs1 on KEV0 new
TA
Tanstack/react-start
Tanstack
9.6
1 CVEs1 on KEV0 new
TA
Tanstack/react-start-client
Tanstack
9.6
1 CVEs1 on KEV0 new
TA
Tanstack/react-start-rsc
Tanstack
9.6
1 CVEs1 on KEV0 new
TA
Tanstack/react-start-server
Tanstack
9.6
1 CVEs1 on KEV0 new
TA
Tanstack/router-cli
Tanstack
9.6
1 CVEs1 on KEV0 new
TA
Tanstack/router-core
Tanstack
9.6
1 CVEs1 on KEV0 new
TA
Tanstack/router-devtools
Tanstack
9.6
1 CVEs1 on KEV0 new
TA
Tanstack/router-devtools-core
Tanstack
9.6
1 CVEs1 on KEV0 new
TA
Tanstack/router-generator
Tanstack
9.6
1 CVEs1 on KEV0 new
TA
Tanstack/router-plugin
Tanstack
9.6
1 CVEs1 on KEV0 new
TA
Tanstack/router-ssr-query-core
Tanstack
9.6
1 CVEs1 on KEV0 new
TA
Tanstack/router-utils
Tanstack
9.6
1 CVEs1 on KEV0 new
TA
Tanstack/router-vite-plugin
Tanstack
9.6
1 CVEs1 on KEV0 new
TA
Tanstack/solid-router
Tanstack
9.6
1 CVEs1 on KEV0 new
TA
Tanstack/solid-router-devtools
Tanstack
9.6
1 CVEs1 on KEV0 new
TA
Tanstack/solid-router-ssr-query
Tanstack
9.6
1 CVEs1 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-102989
SO
solid-start
@tanstack
9.3
1%
Oct 13TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responses
CVE-2026-78177
DE
devtools-vite
TanStack
4.5
1%
Aug 24TanStack devtools-vite Development Devtools Event Bus package-manager.ts installPackage os command injection
CVE-2026-15607
DB
db
tanstack
4.3
0%
Jul 13tanstack db Alias Path select.ts select prototype pollution
CVE-2026-45321
RansomwareIn wildKEV
RE
react-router-devtools
@tanstack
9.6
3%
May 12Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys
CVE-2024-24558
RE
React-query-next-experimental
Tanstack
6.1
0%
Jan 30TanStack Query supplies asynchronous state management, server-state utilities and data fetching for the web