CPE

Cpe:2.3:a:tanstack:start-Server-Core::::::::

1 brief RSS

Reflected XSS in TanStack Start Server-Functions

A critical reflected XSS vulnerability (CVE-2026-102989) in TanStack Start server-functions allows unauthenticated attackers to execute arbitrary JavaScript in the context of the application origin.

start-server-core +3 xss web-vulnerability patch-now

1t 1c 1h ago

Cpe:2.3:a:tanstack:start-Server-Core:*:*:*:*:*:*:*:*

Reflected XSS in TanStack Start Server-Functions

Cpe:2.3:a:tanstack:start-Server-Core::::::::