Safeguard
Tag

TanStack Start CVE-2026-102989

Safeguard articles tagged "TanStack Start CVE-2026-102989" — guides, analysis, and best practices for software supply chain and application security.

1 article

Vulnerability Analysis

TanStack Start CVE-2026-102989: How a Server-Function Link Became Reflected XSS

TanStack Start 1.143.12 to 1.168.59 let a crafted server-function URL serve attacker HTML. What broke, the fix, and a lockfile and edge-rule checker.

Oct 18, 202612 min read

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

Book a demoGet started

No sales call required, even your agent can complete the purchase over MCP.