{"schema":"threatline.record/2","record":{"id":"CVE-2026-45321","aliases":["GHSA-g7cv-rxg3-hmpx"],"summary":"TanStack Unspecified Vulnerability","details":"TanStack contains an unspecified vulnerability that allowed malicious versions of the product to be published to the npm registry to publish credential-stealing malware under a trusted identity.","categories":["Libraries & packages"],"product":"TanStack","vendor":"TanStack","ecosystem":"npm","affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-45321","source_modified_at":"2026-08-04T03:56:09.005Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"arktype-adapter","vendor":"@tanstack","versions":[{"status":"affected","version":"1.166.12"},{"status":"affected","version":"1.166.15"}],"defaultStatus":null},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-45321","source_modified_at":"2026-08-04T03:56:09.005Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"eslint-plugin-router","vendor":"@tanstack","versions":[{"status":"affected","version":"1.161.9"},{"status":"affected","version":"1.161.12"}],"defaultStatus":null},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-45321","source_modified_at":"2026-08-04T03:56:09.005Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"eslint-plugin-start","vendor":"@tanstack","versions":[{"status":"affected","version":"0.0.4"},{"status":"affected","version":"0.0.7"}],"defaultStatus":null},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-45321","source_modified_at":"2026-08-04T03:56:09.005Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"history","vendor":"@tanstack","versions":[{"status":"affected","version":"1.161.9"},{"status":"affected","version":"1.161.12"}],"defaultStatus":null},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-45321","source_modified_at":"2026-08-04T03:56:09.005Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"nitro-v2-vite-plugin","vendor":"@tanstack","versions":[{"status":"affected","version":"1.154.12"},{"status":"affected","version":"1.154.15"}],"defaultStatus":null},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-45321","source_modified_at":"2026-08-04T03:56:09.005Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"react-router","vendor":"@tanstack","versions":[{"status":"affected","version":"1.169.5"},{"status":"affected","version":"1.169.8"}],"defaultStatus":null},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-45321","source_modified_at":"2026-08-04T03:56:09.005Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"react-router-devtools","vendor":"@tanstack","versions":[{"status":"affected","version":"1.166.16"},{"status":"affected","version":"1.166.19"}],"defaultStatus":null},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-45321","source_modified_at":"2026-08-04T03:56:09.005Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"react-router-ssr-query","vendor":"@tanstack","versions":[{"status":"affected","version":"1.166.15"},{"status":"affected","version":"1.166.18"}],"defaultStatus":null},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-45321","source_modified_at":"2026-08-04T03:56:09.005Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"react-start","vendor":"@tanstack","versions":[{"status":"affected","version":"1.167.68"},{"status":"affected","version":"1.167.71"}],"defaultStatus":null},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-45321","source_modified_at":"2026-08-04T03:56:09.005Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"react-start-client","vendor":"@tanstack","versions":[{"status":"affected","version":"1.166.51"},{"status":"affected","version":"1.166.54"}],"defaultStatus":null},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-45321","source_modified_at":"2026-08-04T03:56:09.005Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"react-start-rsc","vendor":"@tanstack","versions":[{"status":"affected","version":"0.0.47"},{"status":"affected","version":"0.0.50"}],"defaultStatus":null},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-45321","source_modified_at":"2026-08-04T03:56:09.005Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"react-start-server","vendor":"@tanstack","versions":[{"status":"affected","version":"1.166.55"},{"status":"affected","version":"1.166.58"}],"defaultStatus":null},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-45321","source_modified_at":"2026-08-04T03:56:09.005Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"router-cli","vendor":"@tanstack","versions":[{"status":"affected","version":"1.166.46"},{"status":"affected","version":"1.166.49"}],"defaultStatus":null},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-45321","source_modified_at":"2026-08-04T03:56:09.005Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"router-core","vendor":"@tanstack","versions":[{"status":"affected","version":"1.169.5"},{"status":"affected","version":"1.169.8"}],"defaultStatus":null},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-45321","source_modified_at":"2026-08-04T03:56:09.005Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"router-devtools","vendor":"@tanstack","versions":[{"status":"affected","version":"1.166.16"},{"status":"affected","version":"1.166.19"}],"defaultStatus":null},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-45321","source_modified_at":"2026-08-04T03:56:09.005Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"router-devtools-core","vendor":"@tanstack","versions":[{"status":"affected","version":"1.167.6"},{"status":"affected","version":"1.167.9"}],"defaultStatus":null},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-45321","source_modified_at":"2026-08-04T03:56:09.005Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"router-generator","vendor":"@tanstack","versions":[{"status":"affected","version":"1.166.45"},{"status":"affected","version":"1.166.48"}],"defaultStatus":null},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-45321","source_modified_at":"2026-08-04T03:56:09.005Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"router-plugin","vendor":"@tanstack","versions":[{"status":"affected","version":"1.167.38"},{"status":"affected","version":"1.167.41"}],"defaultStatus":null},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-45321","source_modified_at":"2026-08-04T03:56:09.005Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"router-ssr-query-core","vendor":"@tanstack","versions":[{"status":"affected","version":"1.168.3"},{"status":"affected","version":"1.168.6"}],"defaultStatus":null},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-45321","source_modified_at":"2026-08-04T03:56:09.005Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"router-utils","vendor":"@tanstack","versions":[{"status":"affected","version":"1.161.11"},{"status":"affected","version":"1.161.14"}],"defaultStatus":null},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-45321","source_modified_at":"2026-08-04T03:56:09.005Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"outer-vite-plugin","vendor":"@tanstack","versions":[{"status":"affected","version":"1.166.53"},{"status":"affected","version":"1.166.56"}],"defaultStatus":null},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-45321","source_modified_at":"2026-08-04T03:56:09.005Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"solid-router","vendor":"@tanstack","versions":[{"status":"affected","version":"1.169.5"},{"status":"affected","version":"1.169.8"}],"defaultStatus":null},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-45321","source_modified_at":"2026-08-04T03:56:09.005Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"solid-router-devtools","vendor":"@tanstack","versions":[{"status":"affected","version":"1.166.16"},{"status":"affected","version":"1.166.19"}],"defaultStatus":null},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-45321","source_modified_at":"2026-08-04T03:56:09.005Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"solid-router-ssr-query","vendor":"@tanstack","versions":[{"status":"affected","version":"1.166.15"},{"status":"affected","version":"1.166.18"}],"defaultStatus":null},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-45321","source_modified_at":"2026-08-04T03:56:09.005Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"solid-start","vendor":"@tanstack","versions":[{"status":"affected","version":"1.167.65"},{"status":"affected","version":"1.167.68"}],"defaultStatus":null},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-45321","source_modified_at":"2026-08-04T03:56:09.005Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"solid-start-client","vendor":"@tanstack","versions":[{"status":"affected","version":"1.166.50"},{"status":"affected","version":"1.166.53"}],"defaultStatus":null},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-45321","source_modified_at":"2026-08-04T03:56:09.005Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"solid-start-server","vendor":"@tanstack","versions":[{"status":"affected","version":"1.166.54"},{"status":"affected","version":"1.166.57"}],"defaultStatus":null},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-45321","source_modified_at":"2026-08-04T03:56:09.005Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"start-client-core","vendor":"@tanstack","versions":[{"status":"affected","version":"1.168.5"},{"status":"affected","version":"1.168.8"}],"defaultStatus":null},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-45321","source_modified_at":"2026-08-04T03:56:09.005Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"start-fn-stubs","vendor":"@tanstack","versions":[{"status":"affected","version":"1.161.9"},{"status":"affected","version":"1.161.12"}],"defaultStatus":null},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-45321","source_modified_at":"2026-08-04T03:56:09.005Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"start-plugin-core","vendor":"@tanstack","versions":[{"status":"affected","version":"1.169.23"},{"status":"affected","version":"1.169.26"}],"defaultStatus":null},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-45321","source_modified_at":"2026-08-04T03:56:09.005Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"start-server-core","vendor":"@tanstack","versions":[{"status":"affected","version":"1.167.33"},{"status":"affected","version":"1.167.36"}],"defaultStatus":null},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-45321","source_modified_at":"2026-08-04T03:56:09.005Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"start-static-server-functions","vendor":"@tanstack","versions":[{"status":"affected","version":"1.166.44"},{"status":"affected","version":"1.166.47"}],"defaultStatus":null},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-45321","source_modified_at":"2026-08-04T03:56:09.005Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"start-storage-context","vendor":"@tanstack","versions":[{"status":"affected","version":"1.166.38"},{"status":"affected","version":"1.166.41"}],"defaultStatus":null},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-45321","source_modified_at":"2026-08-04T03:56:09.005Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"valibot-adapter","vendor":"@tanstack","versions":[{"status":"affected","version":"1.166.12"},{"status":"affected","version":"1.166.15"}],"defaultStatus":null},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-45321","source_modified_at":"2026-08-04T03:56:09.005Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"virtual-file-routes","vendor":"@tanstack","versions":[{"status":"affected","version":"1.161.10"},{"status":"affected","version":"1.161.13"}],"defaultStatus":null},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-45321","source_modified_at":"2026-08-04T03:56:09.005Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"vue-router","vendor":"@tanstack","versions":[{"status":"affected","version":"1.169.5"},{"status":"affected","version":"1.169.8"}],"defaultStatus":null},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-45321","source_modified_at":"2026-08-04T03:56:09.005Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"vue-router-devtools","vendor":"@tanstack","versions":[{"status":"affected","version":"1.166.16"},{"status":"affected","version":"1.166.19"}],"defaultStatus":null},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-45321","source_modified_at":"2026-08-04T03:56:09.005Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"vue-router-ssr-query","vendor":"@tanstack","versions":[{"status":"affected","version":"1.166.15"},{"status":"affected","version":"1.166.18"}],"defaultStatus":null},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-45321","source_modified_at":"2026-08-04T03:56:09.005Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"vue-start","vendor":"@tanstack","versions":[{"status":"affected","version":"1.167.61"},{"status":"affected","version":"1.167.64"}],"defaultStatus":null},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-45321","source_modified_at":"2026-08-04T03:56:09.005Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"vue-start-client","vendor":"@tanstack","versions":[{"status":"affected","version":"1.166.46"},{"status":"affected","version":"1.166.49"}],"defaultStatus":null},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/arktype-adapter"},"range":"1.166.12, 1.166.15"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/eslint-plugin-router"},"range":"1.161.9, 1.161.12"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/eslint-plugin-start"},"range":"0.0.4, 0.0.7"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/history"},"range":"1.161.9, 1.161.12"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/nitro-v2-vite-plugin"},"range":"1.154.12, 1.154.15"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/react-router"},"range":"1.169.5, 1.169.8"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/react-router-devtools"},"range":"1.166.16, 1.166.19"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/react-router-ssr-query"},"range":"1.166.15, 1.166.18"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/react-start"},"range":"1.167.68, 1.167.71"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/react-start-client"},"range":"1.166.51, 1.166.54"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/react-start-rsc"},"range":"0.0.47, 0.0.50"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/react-start-server"},"range":"1.166.55, 1.166.58"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/router-cli"},"range":"1.166.46, 1.166.49"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/router-core"},"range":"1.169.5, 1.169.8"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/router-devtools"},"range":"1.166.16, 1.166.19"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/router-devtools-core"},"range":"1.167.6, 1.167.9"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/router-generator"},"range":"1.166.45, 1.166.48"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/router-plugin"},"range":"1.167.38, 1.167.41"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/router-ssr-query-core"},"range":"1.168.3, 1.168.6"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/router-utils"},"range":"1.161.11, 1.161.14"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/router-vite-plugin"},"range":"1.166.53, 1.166.56"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/solid-router"},"range":"1.169.5, 1.169.8"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/solid-router-devtools"},"range":"1.166.16, 1.166.19"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/solid-router-ssr-query"},"range":"1.166.15, 1.166.18"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/solid-start"},"range":"1.167.65, 1.167.68"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/solid-start-client"},"range":"1.166.50, 1.166.53"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/solid-start-server"},"range":"1.166.54, 1.166.57"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/start-client-core"},"range":"1.168.5, 1.168.8"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/start-fn-stubs"},"range":"1.161.9, 1.161.12"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/start-plugin-core"},"range":"1.169.23, 1.169.26"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/start-server-core"},"range":"1.167.33, 1.167.36"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/start-static-server-functions"},"range":"1.166.44, 1.166.47"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/start-storage-context"},"range":"1.166.38, 1.166.41"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/valibot-adapter"},"range":"1.166.12, 1.166.15"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/virtual-file-routes"},"range":"1.161.10, 1.161.13"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/vue-router"},"range":"1.169.5, 1.169.8"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/vue-router-devtools"},"range":"1.166.16, 1.166.19"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/vue-router-ssr-query"},"range":"1.166.15, 1.166.18"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/vue-start"},"range":"1.167.61, 1.167.64"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/vue-start-client"},"range":"1.166.46, 1.166.49"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/vue-start-server"},"range":"1.166.50, 1.166.53"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/zod-adapter"},"range":"1.166.12, 1.166.15"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/arktype-adapter","purl":"pkg:npm/%40tanstack/arktype-adapter"},"ranges":[{"events":[{"introduced":"1.166.12"},{"fixed":"1.166.16"}],"type":"SEMVER"}],"versions":["1.166.12"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/eslint-plugin-router","purl":"pkg:npm/%40tanstack/eslint-plugin-router"},"ranges":[{"events":[{"introduced":"1.161.9"},{"fixed":"1.161.13"}],"type":"SEMVER"}],"versions":["1.161.9"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/eslint-plugin-start","purl":"pkg:npm/%40tanstack/eslint-plugin-start"},"ranges":[{"events":[{"introduced":"0.0.4"},{"fixed":"0.0.8"}],"type":"SEMVER"}],"versions":["0.0.4"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/history","purl":"pkg:npm/%40tanstack/history"},"ranges":[{"events":[{"introduced":"1.161.9"},{"fixed":"1.161.13"}],"type":"SEMVER"}],"versions":["1.161.9"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/nitro-v2-vite-plugin","purl":"pkg:npm/%40tanstack/nitro-v2-vite-plugin"},"ranges":[{"events":[{"introduced":"1.154.12"},{"fixed":"1.154.16"}],"type":"SEMVER"}],"versions":["1.154.12"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/react-router","purl":"pkg:npm/%40tanstack/react-router"},"ranges":[{"events":[{"introduced":"1.169.5"},{"fixed":"1.169.9"}],"type":"SEMVER"}],"versions":["1.169.5"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/react-router-devtools","purl":"pkg:npm/%40tanstack/react-router-devtools"},"ranges":[{"events":[{"introduced":"1.166.16"},{"fixed":"1.166.20"}],"type":"SEMVER"}],"versions":["1.166.16"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/react-router-ssr-query","purl":"pkg:npm/%40tanstack/react-router-ssr-query"},"ranges":[{"events":[{"introduced":"1.166.15"},{"fixed":"1.166.19"}],"type":"SEMVER"}],"versions":["1.166.15"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/react-start","purl":"pkg:npm/%40tanstack/react-start"},"ranges":[{"events":[{"introduced":"1.167.68"},{"fixed":"1.167.72"}],"type":"SEMVER"}],"versions":["1.167.68"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/react-start-client","purl":"pkg:npm/%40tanstack/react-start-client"},"ranges":[{"events":[{"introduced":"1.166.51"},{"fixed":"1.166.55"}],"type":"SEMVER"}],"versions":["1.166.51"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/react-start-rsc","purl":"pkg:npm/%40tanstack/react-start-rsc"},"ranges":[{"events":[{"introduced":"0.0.47"},{"fixed":"0.0.51"}],"type":"SEMVER"}],"versions":["0.0.47"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/react-start-server","purl":"pkg:npm/%40tanstack/react-start-server"},"ranges":[{"events":[{"introduced":"1.166.55"},{"fixed":"1.166.59"}],"type":"SEMVER"}],"versions":["1.166.55"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/router-cli","purl":"pkg:npm/%40tanstack/router-cli"},"ranges":[{"events":[{"introduced":"1.166.46"},{"fixed":"1.166.50"}],"type":"SEMVER"}],"versions":["1.166.46"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/router-core","purl":"pkg:npm/%40tanstack/router-core"},"ranges":[{"events":[{"introduced":"1.169.5"},{"fixed":"1.169.9"}],"type":"SEMVER"}],"versions":["1.169.5"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/router-devtools","purl":"pkg:npm/%40tanstack/router-devtools"},"ranges":[{"events":[{"introduced":"1.166.16"},{"fixed":"1.166.20"}],"type":"SEMVER"}],"versions":["1.166.16"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/router-devtools-core","purl":"pkg:npm/%40tanstack/router-devtools-core"},"ranges":[{"events":[{"introduced":"1.167.6"},{"fixed":"1.167.10"}],"type":"SEMVER"}],"versions":["1.167.6"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/router-generator","purl":"pkg:npm/%40tanstack/router-generator"},"ranges":[{"events":[{"introduced":"1.166.45"},{"fixed":"1.166.49"}],"type":"SEMVER"}],"versions":["1.166.45"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/router-plugin","purl":"pkg:npm/%40tanstack/router-plugin"},"ranges":[{"events":[{"introduced":"1.167.38"},{"fixed":"1.167.42"}],"type":"SEMVER"}],"versions":["1.167.38"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/router-ssr-query-core","purl":"pkg:npm/%40tanstack/router-ssr-query-core"},"ranges":[{"events":[{"introduced":"1.168.3"},{"fixed":"1.168.7"}],"type":"SEMVER"}],"versions":["1.168.3"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/router-utils","purl":"pkg:npm/%40tanstack/router-utils"},"ranges":[{"events":[{"introduced":"1.161.11"},{"fixed":"1.161.15"}],"type":"SEMVER"}],"versions":["1.161.11"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/router-vite-plugin","purl":"pkg:npm/%40tanstack/router-vite-plugin"},"ranges":[{"events":[{"introduced":"1.166.53"},{"fixed":"1.166.57"}],"type":"SEMVER"}],"versions":["1.166.53"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/solid-router","purl":"pkg:npm/%40tanstack/solid-router"},"ranges":[{"events":[{"introduced":"1.169.5"},{"fixed":"1.169.9"}],"type":"SEMVER"}],"versions":["1.169.5"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/solid-router-devtools","purl":"pkg:npm/%40tanstack/solid-router-devtools"},"ranges":[{"events":[{"introduced":"1.166.16"},{"fixed":"1.166.20"}],"type":"SEMVER"}],"versions":["1.166.16"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/solid-router-ssr-query","purl":"pkg:npm/%40tanstack/solid-router-ssr-query"},"ranges":[{"events":[{"introduced":"1.166.15"},{"fixed":"1.166.19"}],"type":"SEMVER"}],"versions":["1.166.15"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/solid-start","purl":"pkg:npm/%40tanstack/solid-start"},"ranges":[{"events":[{"introduced":"1.167.65"},{"fixed":"1.167.69"}],"type":"SEMVER"}],"versions":["1.167.65"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/solid-start-client","purl":"pkg:npm/%40tanstack/solid-start-client"},"ranges":[{"events":[{"introduced":"1.166.50"},{"fixed":"1.166.54"}],"type":"SEMVER"}],"versions":["1.166.50"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/solid-start-server","purl":"pkg:npm/%40tanstack/solid-start-server"},"ranges":[{"events":[{"introduced":"1.166.54"},{"fixed":"1.166.58"}],"type":"SEMVER"}],"versions":["1.166.54"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/start-client-core","purl":"pkg:npm/%40tanstack/start-client-core"},"ranges":[{"events":[{"introduced":"1.168.5"},{"fixed":"1.168.9"}],"type":"SEMVER"}],"versions":["1.168.5"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/start-fn-stubs","purl":"pkg:npm/%40tanstack/start-fn-stubs"},"ranges":[{"events":[{"introduced":"1.161.9"},{"fixed":"1.161.13"}],"type":"SEMVER"}],"versions":["1.161.9"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/start-plugin-core","purl":"pkg:npm/%40tanstack/start-plugin-core"},"ranges":[{"events":[{"introduced":"1.169.23"},{"fixed":"1.169.27"}],"type":"SEMVER"}],"versions":["1.169.23"]}],"fixed_versions":[{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/arktype-adapter"},"version":"1.166.16"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/eslint-plugin-router"},"version":"1.161.13"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/eslint-plugin-start"},"version":"0.0.8"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/history"},"version":"1.161.13"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/nitro-v2-vite-plugin"},"version":"1.154.16"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/react-router"},"version":"1.169.9"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/react-router-devtools"},"version":"1.166.20"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/react-router-ssr-query"},"version":"1.166.19"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/react-start"},"version":"1.167.72"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/react-start-client"},"version":"1.166.55"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/react-start-rsc"},"version":"0.0.51"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/react-start-server"},"version":"1.166.59"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/router-cli"},"version":"1.166.50"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/router-core"},"version":"1.169.9"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/router-devtools"},"version":"1.166.20"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/router-devtools-core"},"version":"1.167.10"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/router-generator"},"version":"1.166.49"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/router-plugin"},"version":"1.167.42"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/router-ssr-query-core"},"version":"1.168.7"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/router-utils"},"version":"1.161.15"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/router-vite-plugin"},"version":"1.166.57"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/solid-router"},"version":"1.169.9"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/solid-router-devtools"},"version":"1.166.20"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/solid-router-ssr-query"},"version":"1.166.19"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/solid-start"},"version":"1.167.69"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/solid-start-client"},"version":"1.166.54"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/solid-start-server"},"version":"1.166.58"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/start-client-core"},"version":"1.168.9"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/start-fn-stubs"},"version":"1.161.13"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/start-plugin-core"},"version":"1.169.27"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/start-server-core"},"version":"1.167.37"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/start-static-server-functions"},"version":"1.166.48"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/start-storage-context"},"version":"1.166.42"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/valibot-adapter"},"version":"1.166.16"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/virtual-file-routes"},"version":"1.161.14"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/vue-router"},"version":"1.169.9"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/vue-router-devtools"},"version":"1.166.20"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/vue-router-ssr-query"},"version":"1.166.19"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/vue-start"},"version":"1.167.65"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/vue-start-client"},"version":"1.166.50"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/vue-start-server"},"version":"1.166.54"},{"source":"GitHub Advisory Database","source_url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-05-12T05:08:54Z","fetched_at":"2026-10-23T18:58:35.272684Z","package":{"ecosystem":"npm","name":"@tanstack/zod-adapter"},"version":"1.166.16"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/arktype-adapter","purl":"pkg:npm/%40tanstack/arktype-adapter"},"version":"1.166.16"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/eslint-plugin-router","purl":"pkg:npm/%40tanstack/eslint-plugin-router"},"version":"1.161.13"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/eslint-plugin-start","purl":"pkg:npm/%40tanstack/eslint-plugin-start"},"version":"0.0.8"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/history","purl":"pkg:npm/%40tanstack/history"},"version":"1.161.13"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/nitro-v2-vite-plugin","purl":"pkg:npm/%40tanstack/nitro-v2-vite-plugin"},"version":"1.154.16"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/react-router","purl":"pkg:npm/%40tanstack/react-router"},"version":"1.169.9"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/react-router-devtools","purl":"pkg:npm/%40tanstack/react-router-devtools"},"version":"1.166.20"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/react-router-ssr-query","purl":"pkg:npm/%40tanstack/react-router-ssr-query"},"version":"1.166.19"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/react-start","purl":"pkg:npm/%40tanstack/react-start"},"version":"1.167.72"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/react-start-client","purl":"pkg:npm/%40tanstack/react-start-client"},"version":"1.166.55"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/react-start-rsc","purl":"pkg:npm/%40tanstack/react-start-rsc"},"version":"0.0.51"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/react-start-server","purl":"pkg:npm/%40tanstack/react-start-server"},"version":"1.166.59"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/router-cli","purl":"pkg:npm/%40tanstack/router-cli"},"version":"1.166.50"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/router-core","purl":"pkg:npm/%40tanstack/router-core"},"version":"1.169.9"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/router-devtools","purl":"pkg:npm/%40tanstack/router-devtools"},"version":"1.166.20"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/router-devtools-core","purl":"pkg:npm/%40tanstack/router-devtools-core"},"version":"1.167.10"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/router-generator","purl":"pkg:npm/%40tanstack/router-generator"},"version":"1.166.49"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/router-plugin","purl":"pkg:npm/%40tanstack/router-plugin"},"version":"1.167.42"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/router-ssr-query-core","purl":"pkg:npm/%40tanstack/router-ssr-query-core"},"version":"1.168.7"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/router-utils","purl":"pkg:npm/%40tanstack/router-utils"},"version":"1.161.15"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/router-vite-plugin","purl":"pkg:npm/%40tanstack/router-vite-plugin"},"version":"1.166.57"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/solid-router","purl":"pkg:npm/%40tanstack/solid-router"},"version":"1.169.9"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/solid-router-devtools","purl":"pkg:npm/%40tanstack/solid-router-devtools"},"version":"1.166.20"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/solid-router-ssr-query","purl":"pkg:npm/%40tanstack/solid-router-ssr-query"},"version":"1.166.19"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/solid-start","purl":"pkg:npm/%40tanstack/solid-start"},"version":"1.167.69"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/solid-start-client","purl":"pkg:npm/%40tanstack/solid-start-client"},"version":"1.166.54"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/solid-start-server","purl":"pkg:npm/%40tanstack/solid-start-server"},"version":"1.166.58"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/start-client-core","purl":"pkg:npm/%40tanstack/start-client-core"},"version":"1.168.9"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/start-fn-stubs","purl":"pkg:npm/%40tanstack/start-fn-stubs"},"version":"1.161.13"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","source_modified_at":"2026-09-10T03:51:05.608689266Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"ecosystem":"npm","name":"@tanstack/start-plugin-core","purl":"pkg:npm/%40tanstack/start-plugin-core"},"version":"1.169.27"}],"cvss":9.6,"severity":"Critical","kev":{"listed":true,"date_added":"2026-05-27","due_date":"2026-06-10","required_action":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","ransomware_campaign_use":"Known"},"epss":{"probability":0.01054,"percentile":0.64108,"score_date":"2026-10-23"},"published_at":"2026-05-12T00:12:35.452Z","modified_at":"2026-09-10T03:51:05.608689266Z","provenance":[{"source":"CISA KEV","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23T17:00:09.9001Z"},{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-45321","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-08-04T03:56:09.005Z"},{"source":"GitHub Advisory Database","url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","fetched_at":"2026-10-23T18:58:35.272684Z","source_modified_at":"2026-05-12T05:08:54Z"},{"source":"OSV","url":"https://osv.dev/vulnerability/GHSA-g7cv-rxg3-hmpx","fetched_at":"2026-10-23T18:45:31.882637Z","source_modified_at":"2026-09-10T03:51:05.608689266Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-45321","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CISA KEV","CVE List","GitHub Advisory Database","OSV","EPSS"],"references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45321","source":"CISA KEV"},{"source":"CVE List","url":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx","tags":["x_refsource_CONFIRM"]},{"source":"CVE List","url":"https://github.com/TanStack/router/issues/7383","tags":["x_refsource_MISC"]},{"source":"CVE List","url":"https://tanstack.com/blog/npm-supply-chain-compromise-postmortem","tags":["x_refsource_MISC"]},{"source":"CVE List","url":"https://www.stepsecurity.io/blog/mini-shai-hulud-is-back-a-self-spreading-supply-chain-attack-hits-the-npm-ecosystem","tags":["x_refsource_MISC"]},{"source":"CVE List","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-45321","tags":["government-resource"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"active","automatable":"no","technical_impact":"total","assessed_at":"2026-05-27T00:00:00+00:00"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"ecosystem","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-09-10T03:51:05.608689266Z","content_hash":"36ee342c7d22dd4f0be5ce2f66e19e27f508f11037dd69c7cd32c82be64435f8"}}