@tanstack/vue-start
Built from the advisories that name this package: its registry metadata (versions, licence, dependencies) has not been fetched by this service yet.
At a glance
- Ecosystem
- npm
- Vulnerability status
- 2 advisory(ies) without a verdict
Advisories (3)
| Advisory | Affected versions | Latest version |
|---|---|---|
| GHSA-g7cv-rxg3-hmpx Malware in @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys | 1.167.61 – < 1.167.65 ; 1.167.64 – < 1.167.65 | Undetermined |
| GHSA-qx66-fv34-fjm8 TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responses | 1.143.12 – < 1.168.56 | Undetermined |
| MAL-2026-3498 Malicious code in @tanstack/vue-start (npm) | 1.167.64, 1.167.61 | Not affected |
Sources
| Source | Licence |
|---|