Skip to content
OpenAdvisories

Package · npm

@tanstack/start-server-core

3 known vulnerabilities.

Malicious versions reported for this package

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    GHSA-9m65-766c-r333

    TanStack Start - Server Core: Inbound server-function request deserialization could invoke a sibling client-referenced server function

    ### Summary A type-confusion bug in seroval ≤ 1.5.2 ([upstream advisory](https://github.com/lxsmnsyc/seroval/security/advisories)) allowed a crafted JSON body sent to one TanStack Start server function to trigger invocation of a different client-referenced se…

    @tanstack/start-server-core npm