Tanstack vulnerabilities
Published CVEs affecting Tanstack products: 3 record(s), with severity, exploitation and fixes.
Tanstack/solid-start 2Tanstack/vue-start 2Tanstack/react-start 2Tanstack/start-server-core 2Tanstack/vue-router 1Tanstack/solid-start-client 1Tanstack/solid-start-server 1Tanstack/start-client-core 1Tanstack/start-fn-stubs 1Tanstack/start-plugin-core 1Tanstack/start-static-server-functions 1Tanstack/start-storage-context 1Tanstack/valibot-adapter 1Tanstack/virtual-file-routes 1Tanstack/solid-router-devtools 1Tanstack/vue-router-devtools 1Tanstack/vue-router-ssr-query 1Tanstack/vue-start-client 1Tanstack/vue-start-server 1Tanstack/zod-adapter 1Outer-vite-plugin 1Router 1Devtools-vite 1Tanstack/router-cli 1Tanstack/eslint-plugin-router 1Tanstack/eslint-plugin-start 1Tanstack/history 1Tanstack/nitro-v2-vite-plugin 1Tanstack/react-router 1Tanstack/react-router-devtools 1Tanstack/react-router-ssr-query 1Tanstack/react-start-client 1Tanstack/react-start-rsc 1Tanstack/react-start-server 1Tanstack/solid-router-ssr-query 1Tanstack/router-core 1Tanstack/router-devtools 1Tanstack/router-devtools-core 1Tanstack/router-generator 1Tanstack/router-plugin 1
CVE-2026-102989
Critical · 9.3
CWE-79 Oct 13, 2026
TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responses
TanStack Router is a client-first, server-capable, fully type-safe router and full-stack framework for the web. From 1.143.12 until 1.169.39 for @tanstack/start-server-core, 1.168.60 for @tanstack/react-start, 1.168.57 for @tanstack/solid-start, and 1.168.56 for @tanstack/vue-start, an unauthenticated attacker can place non-public fields in a server-function request payload so that attacker-controlled middleware state reaches the error path and a response-shaped object is accepted as an HTTP response. A crafted server-function URL can therefore return attacker-controlled HTML from the application's origin; when a visitor opens the URL, the injected script can access same-origin data and issue requests with the visitor's authority. This issue is fixed in @tanstack/start-server-core 1.169.39, @tanstack/react-start 1.168.60, @tanstack/solid-start 1.168.57, and @tanstack/vue-start 1.168.56.
CVE-2026-78177
Medium · 4.5
CWE-77 Aug 24, 2026
TanStack devtools-vite Development Devtools Event Bus package-manager.ts installPackage os command injection
A vulnerability was found in TanStack devtools-vite 0.7.0. Affected by this issue is the function installPackage of the file packages/devtools-bundler-core/src/package-manager.ts of the component Development Devtools Event Bus. The manipulation of the argument packageName results in os command injection. Attacking locally is a requirement. A high complexity level is associated with this attack. The exploitation is known to be difficult. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
CVE-2026-45321
Critical · 9.6
KEV Urgent · 71 Public exploit Ransomware CWE-506 May 11, 2026
TanStack Unspecified Vulnerability
On 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @tanstack/* packages were published to the npm registry. The publishes were authenticated via the legitimate GitHub Actions OIDC trusted-publisher binding for TanStack/router, but the publish workflow itself was not modified. The attacker chained three known vulnerability classes — a pull_request_target "Pwn Request" misconfiguration, GitHub Actions cache poisoning across the fork↔base trust boundary, and runtime memory extraction of the OIDC token from the Actions runner process — to publish credential-stealing malware under a trusted identity. Each affected package received exactly two malicious versions, published a few minutes apart.