Read the docs

TanStack

Records5All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

TanStack records in CISA KEV
TI-2026-33119 TanStack Unspecified Vulnerability Priority CRITICAL 100KEV 2026-05-27

Components

Products in the NVD configurations · select one to filter the records
React-query-next-experimental 1 record MEDIUM Tanstack/arktype-adapter 1 record CRITICAL Tanstack/eslint-plugin-router 1 record CRITICAL Tanstack/eslint-plugin-start 1 record CRITICAL Tanstack/history 1 record CRITICAL Tanstack/nitro-v2-vite-plugin 1 record CRITICAL Tanstack/react-router 1 record CRITICAL Tanstack/react-router-devtools 1 record CRITICAL

Records

1 record in React-query-next-experimental · all components

TI-2024-16179 CVE-2024-24558 · GHSA-997g-27x8-43rf

react-query-streamed-hydration xss

Priority MEDIUM 42

TanStack Query supplies asynchronous state management, server-state utilities and data fetching for the web.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00385 Published 2024-01-30 Fixed in 5.18.0 CWE-79
Open these records in search →