pkg:npm/@tanstack/react-start-server

1 total CVECRITICAL1

✅ Check your installed version

All known vulnerabilities

  • CRITICAL9.6CVE-2026-45321⚠ KEVMalware in @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys
    >= 1.166.55, < 1.166.59