CVE Browser

Page 1

TanStack devtools-vite Development Devtools Event Bus package-manager.ts installPackage os command injection

tanstack db Alias Path select.ts select prototype pollution

Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys

react-query-streamed-hydration xss

CVE ID	Description	Severity	CVSS	EPSS	Ecosystems	Published
CVE-2026-78177	TanStack devtools-vite Development Devtools Event Bus package-manager.ts installPackage os command injection	LOW	2.0	0.90%		Aug 24, 2026
CVE-2026-15607	tanstack db Alias Path select.ts select prototype pollution	MEDIUM	5.3	0.44%		Jul 13, 2026
CVE-2026-45321 KEV	Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys	CRITICAL	9.6	1.05%	npm	May 12, 2026
CVE-2024-24558	react-query-streamed-hydration xss	HIGH	8.2	0.39%	npm	Jan 30, 2024

Rows per page

Showing 1 to 4 CVEs · page 1