Safeguard
Tag

@tanstack/start-server-core vulnerability

Safeguard articles tagged "@tanstack/start-server-core vulnerability" — guides, analysis, and best practices for software supply chain and application security.

1 article

Vulnerability Analysis

TanStack Start CVE-2026-102989: How a Server-Function Link Became Reflected XSS

TanStack Start 1.143.12 to 1.168.59 let a crafted server-function URL serve attacker HTML. What broke, the fix, and a lockfile and edge-rule checker.

Oct 18, 202612 min read

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

Book a demoGet started

No sales call required, even your agent can complete the purchase over MCP.