Skip to main content

TanStack security briefs

1 published alerts for TanStack products and services.

Actively exploited (KEV)Ransomware

CVE-2026-45321

TanStack Unspecified Vulnerability

TanStack TanStack is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-45321). TanStack contains an unspecified vulnerability that allowed malicious versions of the product to be published to the npm registry to publish credential-stealing malware under a trusted identity. CISA remediation due date: 2026-06-10. If you need help checking exposure, call (864) 335-9223.