HN
login
TanStack Start critical XSS in server functions (CVE-2026-102989)tanstack.com

A fix for a reflected XSS vulnerability in TanStack Start is available on npm. Upgrade and redeploy affected applications.

1 points•joshcsimmons•about 3 hours ago•1 comment•
#tanstack#xss#tanstack start#cve#server#functions#critical#start critical

1 comment

colinublakeabout 3 hours ago
was eyeing Start for a weekend side thing. guess i'm grepping createServerFn before i touch anything now lol

Read the full thread on Hacker News →

Related stories