Vulnerabilities
Summary — last 7 days
New vulnerabilities3,526▼ 1,286 vs. last week
Critical / high1,364▼ 1,397 vs. last week
New active exploitation (KEV)13▲ 6 vs. last week
Unscored (no CVSS)710▲ 647 vs. last week
More filters
1 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Analyzed | Critical (9.6) | 1.1% | ⚠ Active exploitationPoC | Tanstack/arktype-adapterTanstack/eslint-plugin-routerTanstack/eslint-plugin-startTanstack/history+167 | 5/12/2026 | 6/17/2026 | On 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @tanstack/* packages were published to the npm registry. The publishes were authenticated via the legitimate GitHub Actions OIDC trusted-publisher binding for TanStack/router, but the publish workflow itself was not modified. The… |