Tanstack

4 CVEs across 88 Tanstack products. Browse Tanstack vulnerabilities, severities, and proof-of-concept exploits.

Tanstack products with known CVEs

ProductCVEs
Arktype-Adapter1
Db1
Devtools-Vite1
Eslint-Plugin-Router1
Eslint-Plugin-Start1
History1
Nitro-V2-Vite-Plugin1
Outer-Vite-Plugin1
Query1
React-Query-Next-Experimental1
React-Router1
React-Router-Devtools1
React-Router-Ssr-Query1
React-Start1
React-Start-Client1
React-Start-Rsc1
React-Start-Server1
Router-Cli1
Router-Core1
Router-Devtools1
Router-Devtools-Core1
Router-Generator1
Router-Plugin1
Router-Ssr-Query-Core1
Router-Utils1
Solid-Router1
Solid-Router-Devtools1
Solid-Router-Ssr-Query1
Solid-Start1
Solid-Start-Client1
Solid-Start-Server1
Start-Client-Core1
Start-Fn-Stubs1
Start-Plugin-Core1
Start-Server-Core1
Start-Static-Server-Functions1
Start-Storage-Context1
Tanstack\/arktype-Adapter1
Tanstack\/eslint-Plugin-Router1
Tanstack\/eslint-Plugin-Start1
Tanstack\/history1
Tanstack\/nitro-V2-Vite-Plugin1
Tanstack\/react-Router1
Tanstack\/react-Router-Devtools1
Tanstack\/react-Router-Ssr-Query1
Tanstack\/react-Start1
Tanstack\/react-Start-Client1
Tanstack\/react-Start-Rsc1
Tanstack\/react-Start-Server1
Tanstack\/router-Cli1
Tanstack CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-78177Medium4.52026-08-24A vulnerability was found in TanStack devtools-vite 0.7.0. Affected by this issue is the function installPackage of the file packages/devtools-bundler-core/src…
CVE-2026-15607Medium4.32026-07-13A vulnerability was detected in tanstack db up to 0.6.8. Affected by this vulnerability is the function select of the file src/query/compiler/select.ts of the…
CVE-2026-45321Critical9.62026-05-12On 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @tanstack/* packages were published to the npm registry. The publishe…
CVE-2024-24558High8.22024-01-30TanStack Query supplies asynchronous state management, server-state utilities and data fetching for the web. The `@tanstack/react-query-next-experimental` NPM…