Security: TanStack/router
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keysGHSA-g7cv-rxg3-hmpx published
May 11, 2026 by tannerlinsleyCritical -
Inbound server-function request deserialization could invoke a sibling client-referenced server functionGHSA-9m65-766c-r333 published
May 8, 2026 by tannerlinsleyModerate