What’s Vulnerable › Products

@tanstack start-server-core vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your @tanstack start-server-core version is affected

Latest @tanstack start-server-core vulnerabilities

• CVE-2026-102989 — TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responses (CVSS 9.3)