{"id":"EUVD-2026-29352","enisaUuid":"8847f2a5-5eae-3a1f-a2cd-5689f9a40dcd","description":"On 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @tanstack/* packages were published to the npm registry. The publishes were authenticated via the legitimate GitHub Actions OIDC trusted-publisher binding for TanStack/router, but the publish workflow itself was not modified. The attacker chained three known vulnerability classes — a pull_request_target \"Pwn Request\" misconfiguration, GitHub Actions cache poisoning across the fork↔base trust boundary, and runtime memory extraction of the OIDC token from the Actions runner process — to publish credential-stealing malware under a trusted identity. Each affected package received exactly two malicious versions, published a few minutes apart.","datePublished":"May 12, 2026, 12:12:35 AM","dateUpdated":"Aug 4, 2026, 3:56:09 AM","baseScore":9.6,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","references":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx\nhttps://github.com/TanStack/router/issues/7383\nhttps://tanstack.com/blog/npm-supply-chain-compromise-postmortem\nhttps://www.stepsecurity.io/blog/mini-shai-hulud-is-back-a-self-spreading-supply-chain-attack-hits-the-npm-ecosystem\n","aliases":"CVE-2026-45321\n","assigner":"GitHub_M","epss":3.28,"exploitedSince":"May 27, 2026, 12:00:00 AM","enisaIdProduct":[{"id":"03267443-37dc-31ef-8085-96a78f82fdda","product":{"name":"react-router-ssr-query","vendor":{"name":"@tanstack"}},"product_version":"1.166.18"},{"id":"06bf8b95-7fe8-3350-b8cc-a2675d1dbf65","product":{"name":"eslint-plugin-start","vendor":{"name":"@tanstack"}},"product_version":"0.0.4"},{"id":"07c4dca6-af2a-343f-b392-b2b0dd22277b","product":{"name":"arktype-adapter","vendor":{"name":"@tanstack"}},"product_version":"1.166.12"},{"id":"08d98ec1-5daf-33bd-a379-502498bd5220","product":{"name":"history","vendor":{"name":"@tanstack"}},"product_version":"1.161.12"},{"id":"11ffaaf2-37fe-3f34-a873-00c08123c9fc","product":{"name":"valibot-adapter","vendor":{"name":"@tanstack"}},"product_version":"1.166.15"},{"id":"15ec0b75-8c22-3c57-8f21-3be408d72aa6","product":{"name":"vue-router-ssr-query","vendor":{"name":"@tanstack"}},"product_version":"1.166.15"},{"id":"1b8a5cbf-a36d-36e2-a820-f88273c30862","product":{"name":"start-static-server-functions","vendor":{"name":"@tanstack"}},"product_version":"1.166.44"},{"id":"1d64a6c4-a950-387c-a632-95ea7480b741","product":{"name":"vue-start-server","vendor":{"name":"@tanstack"}},"product_version":"1.166.50"},{"id":"1dd9c9b3-5f42-36db-b944-1fe20fe3cfe9","product":{"name":"router-generator","vendor":{"name":"@tanstack"}},"product_version":"1.166.48"},{"id":"2175eb99-8b31-38d3-a4b8-a7fe4dfc13a4","product":{"name":"react-router","vendor":{"name":"@tanstack"}},"product_version":"1.169.8"},{"id":"23cf90db-ed68-3877-9967-031ddbf613d4","product":{"name":"start-storage-context","vendor":{"name":"@tanstack"}},"product_version":"1.166.41"},{"id":"296bc1aa-a8cf-3ad7-b1e6-2b9df69998d8","product":{"name":"router-utils","vendor":{"name":"@tanstack"}},"product_version":"1.161.14"},{"id":"2dc61244-027f-3072-959b-4ee3f46c302c","product":{"name":"start-client-core","vendor":{"name":"@tanstack"}},"product_version":"1.168.5"},{"id":"2dd9c8de-ee60-3f8e-89a0-6e8ee2d5d631","product":{"name":"react-start-rsc","vendor":{"name":"@tanstack"}},"product_version":"0.0.47"},{"id":"31cbe3d7-6998-348b-8c39-67379795fb21","product":{"name":"solid-start-server","vendor":{"name":"@tanstack"}},"product_version":"1.166.54"},{"id":"31d36739-21d4-39e7-aac6-ff0aaf9db664","product":{"name":"router-devtools-core","vendor":{"name":"@tanstack"}},"product_version":"1.167.9"},{"id":"328ee773-8e47-3e5f-8635-5f2fb64f8cd4","product":{"name":"solid-router-ssr-query","vendor":{"name":"@tanstack"}},"product_version":"1.166.18"},{"id":"34febb74-cd56-383a-b903-8cdb9f03a387","product":{"name":"router-plugin","vendor":{"name":"@tanstack"}},"product_version":"1.167.38"},{"id":"3dd1843e-e2e6-338e-a99f-7a77f2e05056","product":{"name":"router-core","vendor":{"name":"@tanstack"}},"product_version":"1.169.8"},{"id":"3e01ca41-7c23-3c1e-86b6-ab29c77e0525","product":{"name":"eslint-plugin-router","vendor":{"name":"@tanstack"}},"product_version":"1.161.9"},{"id":"3e54b13f-d8f2-35f1-99dd-2288697a982e","product":{"name":"vue-start-client","vendor":{"name":"@tanstack"}},"product_version":"1.166.46"},{"id":"4bbc5066-3559-32bf-a76e-6d0d08779098","product":{"name":"start-plugin-core","vendor":{"name":"@tanstack"}},"product_version":"1.169.23"},{"id":"4e81f4b7-bf21-3462-bc34-fd33579b068e","product":{"name":"history","vendor":{"name":"@tanstack"}},"product_version":"1.161.9"},{"id":"51779555-dbf8-3c02-bd7a-b413715a4c51","product":{"name":"solid-start-client","vendor":{"name":"@tanstack"}},"product_version":"1.166.50"},{"id":"546a5d8f-934c-30f1-a9ec-9c3b6448d973","product":{"name":"start-static-server-functions","vendor":{"name":"@tanstack"}},"product_version":"1.166.47"},{"id":"55c3fd9c-2c73-3599-acb3-a078926e02de","product":{"name":"solid-router-ssr-query","vendor":{"name":"@tanstack"}},"product_version":"1.166.15"},{"id":"57ca38c6-845b-38dd-bbd1-41eb4515bb22","product":{"name":"router-devtools","vendor":{"name":"@tanstack"}},"product_version":"1.166.16"},{"id":"5b514a1f-aa03-33c3-a8f2-39ae42cb6692","product":{"name":"start-server-core","vendor":{"name":"@tanstack"}},"product_version":"1.167.33"},{"id":"5e56db52-09a5-3fc7-b0bf-45fa5c2e72ea","product":{"name":"arktype-adapter","vendor":{"name":"@tanstack"}},"product_version":"1.166.15"},{"id":"649d229b-b988-3d67-b2e7-5e9d6f162a1b","product":{"name":"vue-router-devtools","vendor":{"name":"@tanstack"}},"product_version":"1.166.19"},{"id":"661e306a-282a-3d5a-b031-f32e23739bf5","product":{"name":"solid-router","vendor":{"name":"@tanstack"}},"product_version":"1.169.8"},{"id":"6acb6d26-096b-30f6-8597-ddd0cfa2f680","product":{"name":"react-router-ssr-query","vendor":{"name":"@tanstack"}},"product_version":"1.166.15"},{"id":"6b8f4d3b-4416-35ed-ab24-aa0310bcb9dd","product":{"name":"router-devtools","vendor":{"name":"@tanstack"}},"product_version":"1.166.19"},{"id":"6c5b1e09-b9e7-3046-b98f-3e015680f053","product":{"name":"virtual-file-routes","vendor":{"name":"@tanstack"}},"product_version":"1.161.13"},{"id":"703dfdc6-5f90-3e23-8a42-085ee57e4e41","product":{"name":"outer-vite-plugin","vendor":{"name":"@tanstack"}},"product_version":"1.166.56"},{"id":"716914da-d829-34d4-b4e2-10539a2529e0","product":{"name":"router-generator","vendor":{"name":"@tanstack"}},"product_version":"1.166.45"},{"id":"717e6e33-0c06-3f09-aa8f-7e61f6e9d599","product":{"name":"outer-vite-plugin","vendor":{"name":"@tanstack"}},"product_version":"1.166.53"},{"id":"718b5fa2-a6d1-30c7-9a50-4c94291a3618","product":{"name":"react-start-rsc","vendor":{"name":"@tanstack"}},"product_version":"0.0.50"},{"id":"71e426c4-58b6-3f03-96e8-cbb27aabd8a7","product":{"name":"vue-router","vendor":{"name":"@tanstack"}},"product_version":"1.169.8"},{"id":"779bdcdb-f546-399b-a998-be47d1e52b0e","product":{"name":"zod-adapter","vendor":{"name":"@tanstack"}},"product_version":"1.166.12"},{"id":"7a09946e-9d7d-385b-a628-b74893fb50b8","product":{"name":"vue-start-server","vendor":{"name":"@tanstack"}},"product_version":"1.166.53"},{"id":"7b585a3c-d24d-3c7a-8232-9cc88e722ac1","product":{"name":"eslint-plugin-start","vendor":{"name":"@tanstack"}},"product_version":"0.0.7"},{"id":"7cbc0fce-54ee-3911-a1a8-640aebe527ed","product":{"name":"react-start","vendor":{"name":"@tanstack"}},"product_version":"1.167.71"},{"id":"81ac9490-79a5-3835-af32-93151492468c","product":{"name":"solid-router","vendor":{"name":"@tanstack"}},"product_version":"1.169.5"},{"id":"82fa351d-5418-3b2b-98f0-618933a710fc","product":{"name":"react-start-client","vendor":{"name":"@tanstack"}},"product_version":"1.166.51"},{"id":"8af36a97-05a1-339f-ab73-3392d1987009","product":{"name":"vue-router-devtools","vendor":{"name":"@tanstack"}},"product_version":"1.166.16"},{"id":"8ce47a94-c64b-398d-ac85-a1fc01d62130","product":{"name":"nitro-v2-vite-plugin","vendor":{"name":"@tanstack"}},"product_version":"1.154.15"},{"id":"93cea73b-5582-3178-bd85-78ac6ebccd09","product":{"name":"start-fn-stubs","vendor":{"name":"@tanstack"}},"product_version":"1.161.9"},{"id":"99147d6b-d6c3-311a-a6b8-d4dbb1e73b77","product":{"name":"vue-router","vendor":{"name":"@tanstack"}},"product_version":"1.169.5"},{"id":"9cb12c2a-32f9-31ef-9d38-c579253387da","product":{"name":"react-router","vendor":{"name":"@tanstack"}},"product_version":"1.169.5"},{"id":"9d91167b-21b4-314a-9213-b300fbaf4271","product":{"name":"react-router-devtools","vendor":{"name":"@tanstack"}},"product_version":"1.166.16"},{"id":"9db2c24d-2c3e-30fe-9f1c-999db4f150d2","product":{"name":"solid-router-devtools","vendor":{"name":"@tanstack"}},"product_version":"1.166.16"},{"id":"a2d8dfc7-e6e7-3afa-8f58-738c113ce848","product":{"name":"vue-start-client","vendor":{"name":"@tanstack"}},"product_version":"1.166.49"},{"id":"a4216953-4493-3016-89d3-7d9add28800a","product":{"name":"eslint-plugin-router","vendor":{"name":"@tanstack"}},"product_version":"1.161.12"},{"id":"a44ef760-140c-3979-8191-0f07bb00a8ef","product":{"name":"router-ssr-query-core","vendor":{"name":"@tanstack"}},"product_version":"1.168.6"},{"id":"a4a335d9-d12a-3f00-a378-4d09866cc2f1","product":{"name":"solid-start-server","vendor":{"name":"@tanstack"}},"product_version":"1.166.57"},{"id":"a56ec79d-a36d-3de4-b089-c0b4aee29937","product":{"name":"start-plugin-core","vendor":{"name":"@tanstack"}},"product_version":"1.169.26"},{"id":"a81a5c90-80b7-3cdc-add5-2ee720513efc","product":{"name":"router-ssr-query-core","vendor":{"name":"@tanstack"}},"product_version":"1.168.3"},{"id":"aa00bafc-9160-37f1-952c-ca504c37eb33","product":{"name":"router-devtools-core","vendor":{"name":"@tanstack"}},"product_version":"1.167.6"},{"id":"aa244c01-e3d2-375c-82a9-5154171017fe","product":{"name":"router-cli","vendor":{"name":"@tanstack"}},"product_version":"1.166.49"},{"id":"ab51976c-2b15-3e4f-b990-92df0fe03be1","product":{"name":"router-plugin","vendor":{"name":"@tanstack"}},"product_version":"1.167.41"},{"id":"b41d529e-6cfb-3373-aa00-74c443bf52d9","product":{"name":"router-utils","vendor":{"name":"@tanstack"}},"product_version":"1.161.11"},{"id":"bb1b611d-948c-3b04-b1f0-a8fe58626c3a","product":{"name":"react-start-server","vendor":{"name":"@tanstack"}},"product_version":"1.166.58"},{"id":"bd84ed3d-22c5-3e5e-9b95-320da8fe445d","product":{"name":"solid-start-client","vendor":{"name":"@tanstack"}},"product_version":"1.166.53"},{"id":"be29b032-0485-3e7e-b1f2-88008ff47a38","product":{"name":"solid-router-devtools","vendor":{"name":"@tanstack"}},"product_version":"1.166.19"},{"id":"bffd6560-c1ed-3b79-95c7-68075dd679cf","product":{"name":"start-server-core","vendor":{"name":"@tanstack"}},"product_version":"1.167.36"},{"id":"c1839bcb-9f99-31b7-9bef-76b2805dfc94","product":{"name":"vue-router-ssr-query","vendor":{"name":"@tanstack"}},"product_version":"1.166.18"},{"id":"c3382a10-82a9-3a7e-9469-c2283e98e76b","product":{"name":"solid-start","vendor":{"name":"@tanstack"}},"product_version":"1.167.68"},{"id":"c863de21-3a66-372e-bdc6-6eb4b6c4384b","product":{"name":"vue-start","vendor":{"name":"@tanstack"}},"product_version":"1.167.61"},{"id":"cc3980a8-4c19-3b2c-8a0f-0321dd20afec","product":{"name":"react-start-client","vendor":{"name":"@tanstack"}},"product_version":"1.166.54"},{"id":"cc992966-a360-324f-8021-20d3af422a3d","product":{"name":"valibot-adapter","vendor":{"name":"@tanstack"}},"product_version":"1.166.12"},{"id":"cd115fb6-db76-35c3-9ffa-16f1c3c91f6b","product":{"name":"router-core","vendor":{"name":"@tanstack"}},"product_version":"1.169.5"},{"id":"d16cc13f-ccbe-33f9-816c-b6c121641a4e","product":{"name":"react-start-server","vendor":{"name":"@tanstack"}},"product_version":"1.166.55"},{"id":"d2cde7bc-a005-3609-9b18-fb6ab4824b63","product":{"name":"router-cli","vendor":{"name":"@tanstack"}},"product_version":"1.166.46"},{"id":"d50e0ae8-47a0-3786-be8b-8b114623b029","product":{"name":"start-storage-context","vendor":{"name":"@tanstack"}},"product_version":"1.166.38"},{"id":"daa6c1dc-828e-347c-8ccd-5370434afdac","product":{"name":"vue-start","vendor":{"name":"@tanstack"}},"product_version":"1.167.64"},{"id":"dd5102b3-8ca4-3a59-a51d-375e6ce56c7c","product":{"name":"start-fn-stubs","vendor":{"name":"@tanstack"}},"product_version":"1.161.12"},{"id":"e9ce8364-d8d6-3702-99f8-644aaf4851e8","product":{"name":"virtual-file-routes","vendor":{"name":"@tanstack"}},"product_version":"1.161.10"},{"id":"e9d01a39-fb7f-3c4f-8d2c-6411915f12cc","product":{"name":"solid-start","vendor":{"name":"@tanstack"}},"product_version":"1.167.65"},{"id":"f0497c77-d626-325a-99d4-ee0e7e38bf8a","product":{"name":"zod-adapter","vendor":{"name":"@tanstack"}},"product_version":"1.166.15"},{"id":"f0b78451-4ce0-3cf7-9820-1e33da5fb417","product":{"name":"react-start","vendor":{"name":"@tanstack"}},"product_version":"1.167.68"},{"id":"f7dcfd1d-8561-36eb-b775-26179c58b919","product":{"name":"start-client-core","vendor":{"name":"@tanstack"}},"product_version":"1.168.8"},{"id":"fe6baa35-d66c-335c-9ec6-21afee513013","product":{"name":"nitro-v2-vite-plugin","vendor":{"name":"@tanstack"}},"product_version":"1.154.12"},{"id":"ff3c1cf2-d2b9-3c76-bbad-3b28c92c2cc7","product":{"name":"react-router-devtools","vendor":{"name":"@tanstack"}},"product_version":"1.166.19"}],"enisaIdVendor":[{"id":"342f3fd3-76bd-3e2c-a88a-1a725fe3fee6","vendor":{"name":"@tanstack"}}],"enisaIdVulnerability":[{"id":"70798d71-f85f-3b29-bfa1-42780cb039e4","vulnerability":{"id":"GHSA-g7cv-rxg3-hmpx","description":"Malware in @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys","datePublished":"May 12, 2026, 12:12:49 AM","dateUpdated":"Jun 8, 2026, 11:53:09 PM","baseScore":0.0,"references":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-45321\nhttps://github.com/TanStack/router/issues/7383\nhttps://github.com/TanStack/router\nhttps://socket.dev/blog/tanstack-npm-packages-compromised-mini-shai-hulud-supply-chain-attack\nhttps://tanstack.com/blog/npm-supply-chain-compromise-postmortem\nhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve\u003dCVE-2026-45321\nhttps://www.stepsecurity.io/blog/mini-shai-hulud-is-back-a-self-spreading-supply-chain-attack-hits-the-npm-ecosystem\n","enisa_id":"EUVD-2026-29352\n","aliases":"GHSA-g7cv-rxg3-hmpx\nCVE-2026-45321\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:00:21 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"a7c8e419-54cf-3bc0-b48d-ed55aba7dca7","vulnerability":{"id":"CVE-2026-45321","description":"On 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @tanstack/* packages were published to the npm registry. The publishes were authenticated via the legitimate GitHub Actions OIDC trusted-publisher binding for TanStack/router, but the publish workflow itself was not modified. The attacker chained three known vulnerability classes — a pull_request_target \"Pwn Request\" misconfiguration, GitHub Actions cache poisoning across the fork↔base trust boundary, and runtime memory extraction of the OIDC token from the Actions runner process — to publish credential-stealing malware under a trusted identity. Each affected package received exactly two malicious versions, published a few minutes apart.","datePublished":"May 12, 2026, 12:12:35 AM","dateUpdated":"Aug 4, 2026, 3:56:09 AM","status":"PUBLISHED","baseScore":9.6,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","references":"https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx\nhttps://github.com/TanStack/router/issues/7383\nhttps://tanstack.com/blog/npm-supply-chain-compromise-postmortem\nhttps://www.stepsecurity.io/blog/mini-shai-hulud-is-back-a-self-spreading-supply-chain-attack-hits-the-npm-ecosystem\n","enisa_id":"EUVD-2026-29352\n","assigner":"GitHub_M","epss":3.28,"dataProcessed":"Nov 3, 2026, 7:17:32 AM","exploitedSince":"May 27, 2026, 12:00:00 AM","vulnerabilityProduct":[{"id":"007ea4fc-ac6c-301d-859f-097f783a8357","product":{"name":"eslint-plugin-start","vendor":{"name":"@tanstack"}},"product_version":"0.0.7"},{"id":"033f76cd-4b0d-3bb3-86b0-10b05790b6e9","product":{"name":"router-devtools","vendor":{"name":"@tanstack"}},"product_version":"1.166.16"},{"id":"042f0c27-e85f-3e07-b853-7ce6c8ac20fa","product":{"name":"solid-router-devtools","vendor":{"name":"@tanstack"}},"product_version":"1.166.16"},{"id":"0587db7d-5f9b-330a-a9f5-02b62e1edd99","product":{"name":"solid-start","vendor":{"name":"@tanstack"}},"product_version":"1.167.65"},{"id":"08e22d2b-0822-33fa-af39-6836411d357b","product":{"name":"router-ssr-query-core","vendor":{"name":"@tanstack"}},"product_version":"1.168.3"},{"id":"094464f2-927b-35cf-8b82-c2bbdc7aa14f","product":{"name":"react-router-devtools","vendor":{"name":"@tanstack"}},"product_version":"1.166.16"},{"id":"09a6fd0f-47bc-3ce4-8cbb-8c40a1990e99","product":{"name":"router-generator","vendor":{"name":"@tanstack"}},"product_version":"1.166.48"},{"id":"0b7d4ac9-55e6-3d00-a8c2-cc21f4da092f","product":{"name":"react-start-client","vendor":{"name":"@tanstack"}},"product_version":"1.166.54"},{"id":"0e5703e0-678d-3d9b-8d98-2c0a2edd2576","product":{"name":"arktype-adapter","vendor":{"name":"@tanstack"}},"product_version":"1.166.12"},{"id":"10f19121-0ba7-3ed5-b68f-0eb43754ee19","product":{"name":"router-devtools-core","vendor":{"name":"@tanstack"}},"product_version":"1.167.6"},{"id":"15883754-667b-3443-9578-2f428110a80e","product":{"name":"react-router-ssr-query","vendor":{"name":"@tanstack"}},"product_version":"1.166.15"},{"id":"16cbcc29-dd3c-3cf9-8a0d-907132a6aaf6","product":{"name":"start-server-core","vendor":{"name":"@tanstack"}},"product_version":"1.167.33"},{"id":"1888e1ee-d942-31f4-80ab-a0733df2dfbf","product":{"name":"eslint-plugin-router","vendor":{"name":"@tanstack"}},"product_version":"1.161.9"},{"id":"19e198ca-7681-300a-a078-3cdcac5f2859","product":{"name":"start-plugin-core","vendor":{"name":"@tanstack"}},"product_version":"1.169.23"},{"id":"1fc1544e-3495-34c0-a518-eccd7ff28c8a","product":{"name":"virtual-file-routes","vendor":{"name":"@tanstack"}},"product_version":"1.161.13"},{"id":"23fa37f9-b44c-3442-8677-c34443451789","product":{"name":"router-ssr-query-core","vendor":{"name":"@tanstack"}},"product_version":"1.168.6"},{"id":"252a745a-519e-3d8d-8b49-15ddbf5e8cfc","product":{"name":"start-storage-context","vendor":{"name":"@tanstack"}},"product_version":"1.166.41"},{"id":"27e42431-c0cb-3523-bc88-cb865eb3b20e","product":{"name":"start-fn-stubs","vendor":{"name":"@tanstack"}},"product_version":"1.161.12"},{"id":"2e59bfe5-922b-33c0-a3e3-bad13862882a","product":{"name":"react-router-ssr-query","vendor":{"name":"@tanstack"}},"product_version":"1.166.18"},{"id":"30ebcb10-3d01-3e81-9e8f-411e95d187a0","product":{"name":"nitro-v2-vite-plugin","vendor":{"name":"@tanstack"}},"product_version":"1.154.15"},{"id":"3136d0b6-f4ff-369f-8322-8153816bfb5d","product":{"name":"outer-vite-plugin","vendor":{"name":"@tanstack"}},"product_version":"1.166.56"},{"id":"34406ebe-eb04-3fbd-9985-81dcfaa6ebb9","product":{"name":"vue-start-server","vendor":{"name":"@tanstack"}},"product_version":"1.166.53"},{"id":"35b7ad13-664a-3937-ba29-0cf26233365c","product":{"name":"start-static-server-functions","vendor":{"name":"@tanstack"}},"product_version":"1.166.44"},{"id":"3b843d7c-101e-3765-ab12-83244c10a37f","product":{"name":"eslint-plugin-start","vendor":{"name":"@tanstack"}},"product_version":"0.0.4"},{"id":"3be86628-06be-38e3-b3d7-ec07bdfe81fd","product":{"name":"vue-start-client","vendor":{"name":"@tanstack"}},"product_version":"1.166.46"},{"id":"3bf2f0d0-b269-3810-a079-fe9e3439cca7","product":{"name":"start-client-core","vendor":{"name":"@tanstack"}},"product_version":"1.168.8"},{"id":"3cd87974-22b8-30b8-a2d0-1b35566b2a9d","product":{"name":"react-start-client","vendor":{"name":"@tanstack"}},"product_version":"1.166.51"},{"id":"42241b2f-8592-356b-8a08-947729126306","product":{"name":"router-devtools","vendor":{"name":"@tanstack"}},"product_version":"1.166.19"},{"id":"43f56f07-51d9-3457-ae87-658c94c084c1","product":{"name":"react-start","vendor":{"name":"@tanstack"}},"product_version":"1.167.71"},{"id":"471ea62d-f573-3170-b680-b49c4202ab6d","product":{"name":"vue-router-devtools","vendor":{"name":"@tanstack"}},"product_version":"1.166.19"},{"id":"49d5aa9f-f747-3542-b537-ff85450fdc42","product":{"name":"router-plugin","vendor":{"name":"@tanstack"}},"product_version":"1.167.38"},{"id":"4b1966e7-b37b-3484-ba08-abff7845f734","product":{"name":"router-devtools-core","vendor":{"name":"@tanstack"}},"product_version":"1.167.9"},{"id":"51064be4-a48d-3d56-a1e2-3f440c4db5e1","product":{"name":"virtual-file-routes","vendor":{"name":"@tanstack"}},"product_version":"1.161.10"},{"id":"532095eb-0d76-345b-8e98-b31a01b23b12","product":{"name":"solid-router","vendor":{"name":"@tanstack"}},"product_version":"1.169.5"},{"id":"5be105e8-e4f6-3d7e-83c6-d14d5eb56fbd","product":{"name":"solid-start","vendor":{"name":"@tanstack"}},"product_version":"1.167.68"},{"id":"5bf20ec8-01df-30b2-b2f5-4270abb42138","product":{"name":"history","vendor":{"name":"@tanstack"}},"product_version":"1.161.9"},{"id":"5e192275-83fa-3b9f-af9c-f2df821ccd25","product":{"name":"start-storage-context","vendor":{"name":"@tanstack"}},"product_version":"1.166.38"},{"id":"60cd309e-2a7d-3cb5-a027-0f0bfc1129b1","product":{"name":"vue-start","vendor":{"name":"@tanstack"}},"product_version":"1.167.64"},{"id":"64aac584-c10d-3104-95ae-4ee635a5e3e1","product":{"name":"router-generator","vendor":{"name":"@tanstack"}},"product_version":"1.166.45"},{"id":"662862f1-6393-3abd-a238-3e3a37f5f211","product":{"name":"react-start-server","vendor":{"name":"@tanstack"}},"product_version":"1.166.55"},{"id":"66b66a1b-7ec0-3823-adcd-238aefa44593","product":{"name":"start-static-server-functions","vendor":{"name":"@tanstack"}},"product_version":"1.166.47"},{"id":"66be76cf-4cf9-3a2e-8aa3-4d84d3c9884e","product":{"name":"solid-router","vendor":{"name":"@tanstack"}},"product_version":"1.169.8"},{"id":"6ceada7d-e12c-3e7a-acd1-d081b6f6bb19","product":{"name":"arktype-adapter","vendor":{"name":"@tanstack"}},"product_version":"1.166.15"},{"id":"6dc9654a-954f-331a-9270-60fab3c7d020","product":{"name":"outer-vite-plugin","vendor":{"name":"@tanstack"}},"product_version":"1.166.53"},{"id":"6f4c019f-efc4-398b-ae77-da94ca3724bc","product":{"name":"start-client-core","vendor":{"name":"@tanstack"}},"product_version":"1.168.5"},{"id":"729e0e6f-95e9-3135-9520-92a7f6456443","product":{"name":"vue-router-ssr-query","vendor":{"name":"@tanstack"}},"product_version":"1.166.15"},{"id":"72ab72e7-d550-3ef1-9c34-c4d391af3daf","product":{"name":"router-cli","vendor":{"name":"@tanstack"}},"product_version":"1.166.46"},{"id":"77d6fc36-5102-340e-95e2-228820291c4f","product":{"name":"vue-router-ssr-query","vendor":{"name":"@tanstack"}},"product_version":"1.166.18"},{"id":"7b13f863-f4ed-3391-ab6a-8a0fa08c8307","product":{"name":"valibot-adapter","vendor":{"name":"@tanstack"}},"product_version":"1.166.12"},{"id":"82fd3233-97ae-3f56-ab5c-056e10da451a","product":{"name":"nitro-v2-vite-plugin","vendor":{"name":"@tanstack"}},"product_version":"1.154.12"},{"id":"891755ba-2928-35d2-8f32-c952cce2fd2e","product":{"name":"vue-router","vendor":{"name":"@tanstack"}},"product_version":"1.169.8"},{"id":"8b59a3fa-14a7-3a3b-a29e-f0a724306c66","product":{"name":"start-fn-stubs","vendor":{"name":"@tanstack"}},"product_version":"1.161.9"},{"id":"8d337725-72e3-346c-a092-bda5df4d68e0","product":{"name":"vue-start-server","vendor":{"name":"@tanstack"}},"product_version":"1.166.50"},{"id":"8dcec701-dc26-3e5e-96f8-7c40a00756c8","product":{"name":"router-core","vendor":{"name":"@tanstack"}},"product_version":"1.169.5"},{"id":"8fd6490e-9c97-3fd8-a855-21c16077c122","product":{"name":"solid-start-client","vendor":{"name":"@tanstack"}},"product_version":"1.166.50"},{"id":"93ee0d1e-5efb-3218-b5ee-f55ec18ebc20","product":{"name":"router-plugin","vendor":{"name":"@tanstack"}},"product_version":"1.167.41"},{"id":"9e307f67-2fbd-3ee6-8f6e-ad3ac545c2e3","product":{"name":"zod-adapter","vendor":{"name":"@tanstack"}},"product_version":"1.166.15"},{"id":"a3a6ea50-bc5c-38a6-8d23-d5d7d43c49a9","product":{"name":"react-router-devtools","vendor":{"name":"@tanstack"}},"product_version":"1.166.19"},{"id":"a446a3a9-604e-31b7-9c60-9b6c5227890c","product":{"name":"solid-start-client","vendor":{"name":"@tanstack"}},"product_version":"1.166.53"},{"id":"a9392f1b-caca-3b90-aa9f-f4d58d44cf20","product":{"name":"router-cli","vendor":{"name":"@tanstack"}},"product_version":"1.166.49"},{"id":"aa871562-6240-315f-bbf2-20c245f891af","product":{"name":"solid-router-devtools","vendor":{"name":"@tanstack"}},"product_version":"1.166.19"},{"id":"abfa9224-51d6-34b8-a30a-a32f901b5a1a","product":{"name":"react-start","vendor":{"name":"@tanstack"}},"product_version":"1.167.68"},{"id":"b3b76212-ff31-35cf-99ad-060fc020c1bd","product":{"name":"vue-start","vendor":{"name":"@tanstack"}},"product_version":"1.167.61"},{"id":"b5c37052-8ca5-328f-8b5e-56523b62737f","product":{"name":"react-start-rsc","vendor":{"name":"@tanstack"}},"product_version":"0.0.50"},{"id":"bada8db4-9f73-3a7c-80f1-c681c0bdaa38","product":{"name":"react-router","vendor":{"name":"@tanstack"}},"product_version":"1.169.5"},{"id":"bb5b4c57-bf37-3476-aa1e-a71ac3390c7b","product":{"name":"vue-router","vendor":{"name":"@tanstack"}},"product_version":"1.169.5"},{"id":"bf54cfbc-abc2-3529-a1de-f3e1af0b8acd","product":{"name":"solid-router-ssr-query","vendor":{"name":"@tanstack"}},"product_version":"1.166.18"},{"id":"c6109426-fb16-3fe7-bc04-319d5667e08d","product":{"name":"start-plugin-core","vendor":{"name":"@tanstack"}},"product_version":"1.169.26"},{"id":"c84b98bf-fcd2-34a9-815d-a1ba033a5275","product":{"name":"react-router","vendor":{"name":"@tanstack"}},"product_version":"1.169.8"},{"id":"d1f5f63c-7595-3d9e-820b-fcb5eb47af95","product":{"name":"router-core","vendor":{"name":"@tanstack"}},"product_version":"1.169.8"},{"id":"d28b6c09-baed-32f7-8c1d-e5c1a1f1eded","product":{"name":"eslint-plugin-router","vendor":{"name":"@tanstack"}},"product_version":"1.161.12"},{"id":"db297bb6-32b5-384b-b11c-fd2a86bdc437","product":{"name":"start-server-core","vendor":{"name":"@tanstack"}},"product_version":"1.167.36"},{"id":"df354f89-c2aa-351e-be48-eeaff3ea3276","product":{"name":"vue-router-devtools","vendor":{"name":"@tanstack"}},"product_version":"1.166.16"},{"id":"e164d3f8-13bd-31de-aabd-c07a679c421d","product":{"name":"router-utils","vendor":{"name":"@tanstack"}},"product_version":"1.161.14"},{"id":"e1ed99fa-45a5-343b-a9a1-d62831b1b54e","product":{"name":"react-start-rsc","vendor":{"name":"@tanstack"}},"product_version":"0.0.47"},{"id":"e57b1355-bd28-3531-8b9b-d42b8b262f86","product":{"name":"router-utils","vendor":{"name":"@tanstack"}},"product_version":"1.161.11"},{"id":"e68a370e-34a3-3649-9e59-c34f98b7e37d","product":{"name":"valibot-adapter","vendor":{"name":"@tanstack"}},"product_version":"1.166.15"},{"id":"e9229883-5900-3d1f-bb8a-e63a1887e5c3","product":{"name":"solid-start-server","vendor":{"name":"@tanstack"}},"product_version":"1.166.54"},{"id":"eee72d8c-6de4-3529-91bd-021027383313","product":{"name":"react-start-server","vendor":{"name":"@tanstack"}},"product_version":"1.166.58"},{"id":"f2e09c92-026f-3c05-89fa-bbcba619b3f9","product":{"name":"zod-adapter","vendor":{"name":"@tanstack"}},"product_version":"1.166.12"},{"id":"f5debab6-f3ee-3d69-a65e-421b5c1cbab1","product":{"name":"solid-start-server","vendor":{"name":"@tanstack"}},"product_version":"1.166.57"},{"id":"fa564780-186c-3357-9602-2aaa90ad9acd","product":{"name":"solid-router-ssr-query","vendor":{"name":"@tanstack"}},"product_version":"1.166.15"},{"id":"fa688bbe-0691-341e-a79e-a308dfda41c0","product":{"name":"vue-start-client","vendor":{"name":"@tanstack"}},"product_version":"1.166.49"},{"id":"ffe1894e-8284-38db-abc1-bb8476d3ead3","product":{"name":"history","vendor":{"name":"@tanstack"}},"product_version":"1.161.12"}],"vulnerabilityVendor":[{"id":"a80d73b9-d77b-39cb-8fb2-0ba49d01a263","vendor":{"name":"@tanstack"}}]}}],"enisaIdAdvisory":[]}