Description
TanStack contains an unspecified vulnerability that allowed malicious versions of the product to be published to the npm registry to publish credential-stealing malware under a trusted identity.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| arktype-adapter | @tanstack / arktype-adapter | 1.166.12 | affected |
| arktype-adapter | @tanstack / arktype-adapter | 1.166.15 | affected |
| eslint-plugin-router | @tanstack / eslint-plugin-router | 1.161.12 | affected |
| eslint-plugin-router | @tanstack / eslint-plugin-router | 1.161.9 | affected |
| eslint-plugin-start | @tanstack / eslint-plugin-start | 0.0.4 | affected |
| eslint-plugin-start | @tanstack / eslint-plugin-start | 0.0.7 | affected |
| history | @tanstack / history | 1.161.12 | affected |
| history | @tanstack / history | 1.161.9 | affected |
| nitro-v2-vite-plugin | @tanstack / nitro-v2-vite-plugin | 1.154.12 | affected |
| nitro-v2-vite-plugin | @tanstack / nitro-v2-vite-plugin | 1.154.15 | affected |
| outer-vite-plugin | @tanstack / outer-vite-plugin | 1.166.53 | affected |
| outer-vite-plugin | @tanstack / outer-vite-plugin | 1.166.56 | affected |
| react-router | @tanstack / react-router | 1.169.5 | affected |
| react-router | @tanstack / react-router | 1.169.8 | affected |
| react-router-devtools | @tanstack / react-router-devtools | 1.166.16 | affected |
| react-router-devtools | @tanstack / react-router-devtools | 1.166.19 | affected |
| react-router-ssr-query | @tanstack / react-router-ssr-query | 1.166.15 | affected |
| react-router-ssr-query | @tanstack / react-router-ssr-query | 1.166.18 | affected |
| react-start | @tanstack / react-start | 1.167.68 | affected |
| react-start | @tanstack / react-start | 1.167.71 | affected |
| react-start-client | @tanstack / react-start-client | 1.166.51 | affected |
| react-start-client | @tanstack / react-start-client | 1.166.54 | affected |
| react-start-rsc | @tanstack / react-start-rsc | 0.0.47 | affected |
| react-start-rsc | @tanstack / react-start-rsc | 0.0.50 | affected |
| react-start-server | @tanstack / react-start-server | 1.166.55 | affected |
| react-start-server | @tanstack / react-start-server | 1.166.58 | affected |
| router-cli | @tanstack / router-cli | 1.166.46 | affected |
| router-cli | @tanstack / router-cli | 1.166.49 | affected |
| router-core | @tanstack / router-core | 1.169.5 | affected |
| router-core | @tanstack / router-core | 1.169.8 | affected |
| router-devtools | @tanstack / router-devtools | 1.166.16 | affected |
| router-devtools | @tanstack / router-devtools | 1.166.19 | affected |
| router-devtools-core | @tanstack / router-devtools-core | 1.167.6 | affected |
| router-devtools-core | @tanstack / router-devtools-core | 1.167.9 | affected |
| router-generator | @tanstack / router-generator | 1.166.45 | affected |
| router-generator | @tanstack / router-generator | 1.166.48 | affected |
| router-plugin | @tanstack / router-plugin | 1.167.38 | affected |
| router-plugin | @tanstack / router-plugin | 1.167.41 | affected |
| router-ssr-query-core | @tanstack / router-ssr-query-core | 1.168.3 | affected |
| router-ssr-query-core | @tanstack / router-ssr-query-core | 1.168.6 | affected |
| router-utils | @tanstack / router-utils | 1.161.11 | affected |
| router-utils | @tanstack / router-utils | 1.161.14 | affected |
| solid-router | @tanstack / solid-router | 1.169.5 | affected |
| solid-router | @tanstack / solid-router | 1.169.8 | affected |
| solid-router-devtools | @tanstack / solid-router-devtools | 1.166.16 | affected |
| solid-router-devtools | @tanstack / solid-router-devtools | 1.166.19 | affected |
| solid-router-ssr-query | @tanstack / solid-router-ssr-query | 1.166.15 | affected |
| solid-router-ssr-query | @tanstack / solid-router-ssr-query | 1.166.18 | affected |
| solid-start | @tanstack / solid-start | 1.167.65 | affected |
| solid-start | @tanstack / solid-start | 1.167.68 | affected |
| solid-start-client | @tanstack / solid-start-client | 1.166.50 | affected |
| solid-start-client | @tanstack / solid-start-client | 1.166.53 | affected |
| solid-start-server | @tanstack / solid-start-server | 1.166.54 | affected |
| solid-start-server | @tanstack / solid-start-server | 1.166.57 | affected |
| start-client-core | @tanstack / start-client-core | 1.168.5 | affected |
| start-client-core | @tanstack / start-client-core | 1.168.8 | affected |
| start-fn-stubs | @tanstack / start-fn-stubs | 1.161.12 | affected |
| start-fn-stubs | @tanstack / start-fn-stubs | 1.161.9 | affected |
| start-plugin-core | @tanstack / start-plugin-core | 1.169.23 | affected |
| start-plugin-core | @tanstack / start-plugin-core | 1.169.26 | affected |
| start-server-core | @tanstack / start-server-core | 1.167.33 | affected |
| start-server-core | @tanstack / start-server-core | 1.167.36 | affected |
| start-static-server-functions | @tanstack / start-static-server-functions | 1.166.44 | affected |
| start-static-server-functions | @tanstack / start-static-server-functions | 1.166.47 | affected |
| start-storage-context | @tanstack / start-storage-context | 1.166.38 | affected |
| start-storage-context | @tanstack / start-storage-context | 1.166.41 | affected |
| valibot-adapter | @tanstack / valibot-adapter | 1.166.12 | affected |
| valibot-adapter | @tanstack / valibot-adapter | 1.166.15 | affected |
| virtual-file-routes | @tanstack / virtual-file-routes | 1.161.10 | affected |
| virtual-file-routes | @tanstack / virtual-file-routes | 1.161.13 | affected |
| vue-router | @tanstack / vue-router | 1.169.5 | affected |
| vue-router | @tanstack / vue-router | 1.169.8 | affected |
| vue-router-devtools | @tanstack / vue-router-devtools | 1.166.16 | affected |
| vue-router-devtools | @tanstack / vue-router-devtools | 1.166.19 | affected |
| vue-router-ssr-query | @tanstack / vue-router-ssr-query | 1.166.15 | affected |
| vue-router-ssr-query | @tanstack / vue-router-ssr-query | 1.166.18 | affected |
| vue-start | @tanstack / vue-start | 1.167.61 | affected |
| vue-start | @tanstack / vue-start | 1.167.64 | affected |
| vue-start-client | @tanstack / vue-start-client | 1.166.46 | affected |
| vue-start-client | @tanstack / vue-start-client | 1.166.49 | affected |
| vue-start-server | @tanstack / vue-start-server | 1.166.50 | affected |
| vue-start-server | @tanstack / vue-start-server | 1.166.53 | affected |
| zod-adapter | @tanstack / zod-adapter | 1.166.12 | affected |
| zod-adapter | @tanstack / zod-adapter | 1.166.15 | affected |