@tanstack/solid-start
1.169.3 · 16 Oct 2026MIT46.3k / weekRepositoryHomepagenpmAtom feed
Security advisories
From OSV, open ones first. Each release line gets its own fix: an older major is fixed by a patch on that major, not by moving to the newest one.
Is your project affected?
Paste your package.json, or type the range you declare for @tanstack/solid-start. It is read in your browser and sent nowhere.
| Line | Newest | Where it stands |
|---|---|---|
| 1.169.3 | Safe from 1.168.57 |
- CriticalTanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responsesGHSA-qx66-fv34-fjm8 · 15 Oct 2026
- 1.x1.143.12 – 1.168.56Fixed in 1.168.57
- CriticalMalware in @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keysGHSA-g7cv-rxg3-hmpx · 12 May 2026
- 1.x1.167.65 – 1.167.68Fixed in 1.168.0
- MaliciousMalicious code in @tanstack/solid-start (npm)MAL-2026-3484 · 12 May 2026
Named versions only: 1.167.68 · 1.167.65. 1.169.3 is safe.
Registry facts last checked 21 Oct 2026. Releases and advisories last read 21 Oct 2026.