@trpc/server

11.19.0 · 16 Sep 2026MIT5.2M / weekRepository Homepage npm Atom feed

Your version

Security advisories

From OSV, open ones first. Each release line gets its own fix: an older major is fixed by a patch on that major, not by moving to the newest one.

Line	Newest	Where it stands
	11.19.0	Safe from 11.8.0
	10.45.4	Safe from 10.45.3

High
tRPC has possible prototype pollution in `experimental_nextAppDirCaller`GHSA-43p4-m455-4f4j · 16 Dec 2025
fixed in 11.8.0, 10.45.3
High
tRPC 11 WebSocket DoS VulnerabilityGHSA-pj3v-9cm8-gvj8 · 24 Apr 2025
fixed in 11.1.1

What npm and deps.dev say about the latest release. Signals, not a verdict.

Reading npm and deps.dev…

Registry facts last checked 28 Oct 2026. Releases and advisories last read 28 Oct 2026.