start-server-core vulnerabilities

CVEs whose affected-version data names the start-server-core package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-102989Critical· 9.3

2w ago

TanStack Router is a client-first, server-capable, fully type-safe router and full-stack framework for the web

TanStack Router is a client-first, server-capable, fully type-safe router and full-stack framework for the web. From 1.143.12 until 1.169.39 for @tanstack/start-server-core, 1.168.60 for @tanstack/react-start, 1.168.57 for @tanstack/soli…

▾ MidnightTanStack · routerEPSS 0.54%via NVD