@tanstack/solid-start
Built from the advisories that name this package: its registry metadata (versions, licence, dependencies) has not been fetched by this service yet.
At a glance
- Ecosystem
- npm
- Vulnerability status
- 2 advisory(ies) without a verdict
Advisories (3)
| Advisory | Affected versions | Latest version |
|---|---|---|
| GHSA-g7cv-rxg3-hmpx Malware in @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys | 1.167.65 – < 1.167.69 ; 1.167.68 – < 1.167.69 | Undetermined |
| GHSA-qx66-fv34-fjm8 TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responses | 1.143.12 – < 1.168.57 | Undetermined |
| MAL-2026-3484 Malicious code in @tanstack/solid-start (npm) | 1.167.68, 1.167.65 | Not affected |
Sources
| Source | Licence |
|---|