TanStack router vulnerabilities (CVE)

CVE records published for TanStack router, newest first. Follow to get an email when a new one appears.

1 results

9.3Critical

CVE-2026-102989 1 month ago

TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responses

TanStack router; @tanstack react-start; @tanstack solid-start; @tanstack start-server-core

TanStack Router is a client-first, server-capable, fully type-safe router and full-stack framework for the web. From 1.143.12 until 1.169.39 for @tanstack/start-server-core, 1.168.60 for @tanstack/react-start, 1.168.57 for @tanstack/solid-start, and 1.168.56 …