4 resultados
4.3Media
CVE-2026-15607

tanstack db Alias Path select.ts select prototype pollution

tanstack db

A vulnerability was detected in tanstack db up to 0.6.8. Affected by this vulnerability is the function select of the file src/query/compiler/select.ts of the component Alias Path Handler. The manipulation results in improperly controlled modification of obje…

9.6Crítica
CVE-2026-45321 KEV Usada en ransomware

Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys

@tanstack arktype-adapter; @tanstack eslint-plugin-router; @tanstack eslint-plugin-start; @tanstack history

On 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @tanstack/* packages were published to the npm registry. The publishes were authenticated via the legitimate GitHub Actions OIDC trusted-publisher binding for TanStack/r…

3.3%EPSS