CVE ID :CVE-2026-102989 Published : Oct. 13, 2026, 5:17 p.m. | 15 minutes ago Description :TanStack Router is a client-first, server-capable, fully type-safe router and full-stack framework for the web. From 1.143.12 until 1.169.39 for @tanstack/start-server-core, 1.168.60 for...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-102989 - TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responses

VERWANDTEARTIKEL

Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN

U.S. CISA adds Ivanti Connect Secure flaw to its Known Exploited Vulnerabilities catalog

Critical FortiSandbox GUI Vulnerability Allows Remote Attackers to Bypass Authentication

CVE-2026-94603 - Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation

CVE-2026-85990 - Leantime: Any Authenticated User Can Self-Escalate to Admin via Unauthorized JSON-RPC Methods

CVE-2026-77459 - Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks