CVE-2026-45321

TanStack Unspecified Vulnerability

Description

TanStack contains an unspecified vulnerability that allowed malicious versions of the product to be published to the npm registry to publish credential-stealing malware under a trusted identity.

Severity: CRITICAL

CVSS Score: 9.6

Vendor: TanStack

Product: TanStack