@tanstack eslint-plugin-start vulnerabilities
1 published CVE names @tanstack eslint-plugin-start among the affected products; CISA lists 1 of them as exploited in the wild.
- 1Published CVEs1 of them scored
- 1Last 12 monthspublished in the last year
- 1Critical0 more rated high
- 1Known exploitedin CISA's KEV catalog
Known exploited
Newest addition to KEV first.
- CVE-2026-45321
Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys
@tanstack · arktype-adapter
ExploitedCritical9.6