PkgSeer

Vulnerabilities

Last updated 2 hours ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
@tanstack/react-start TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responses Critical 9.3 7 hours ago 7 hours ago
@tanstack/react-start Malware in @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys Critical 9.6 5 months ago 1 month ago
@tanstack/react-start-client Malware in @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys Critical 9.6 5 months ago 1 month ago
@tanstack/react-start-rsc Malware in @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys Critical 9.6 5 months ago 1 month ago
@tanstack/react-start-server Malware in @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys Critical 9.6 5 months ago 1 month ago
@tanstack/react-start Malicious code in @tanstack/react-start (npm) Unknown 5 months ago 5 months ago
@tanstack/react-start-rsc Malicious code in @tanstack/react-start-rsc (npm) Unknown 5 months ago 5 months ago
@tanstack/react-start-client Malicious code in @tanstack/react-start-client (npm) Unknown 5 months ago 5 months ago
@tanstack/react-start-server Malicious code in @tanstack/react-start-server (npm) Unknown 5 months ago 5 months ago
Data courtesy of OSV.dev
Page 1