Skip to content
Threat Feed
Subscribe

Tag

Patch-Now

1 brief RSS
critical advisory

Reflected XSS in TanStack Start Server-Functions

A critical reflected XSS vulnerability (CVE-2026-102989) in TanStack Start server-functions allows unauthenticated attackers to execute arbitrary JavaScript in the context of the application origin.

start-server-core +3 xss web-vulnerability patch-now
1t 1c