Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2026-45321

On 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @tanstack/* packages were published to the npm registry. The publishes were authenticated via the legitimate GitHub Actions OIDC trusted-publisher binding for TanStack/router, but the publish workflow itself was not modified. The attacker chained three known vulnerability classes — a pull_request_target "Pwn Request" misconfiguration, GitHub Actions cache poisoning across the fork↔base trust boundary, and runtime memory extraction of the OIDC token from the Actions runner process — to publish credential-stealing malware under a trusted identity. Each affected package received exactly two malicious versions, published a few minutes apart.

Security Impact Summary

This vulnerability carries a CRITICAL severity rating with a CVSS v3.1 score of 9.6, indicating it can be exploited remotely over the network with relatively low complexity though user interaction is required and does not require pre-existing privileges . The vulnerability impacts confidentiality (data exposure), integrity (unauthorized modifications), and availability (service disruption) for affected systems. Impacting 171 products from tanstack, from tanstack, from tanstack and 168 others, organizations running these solutions should prioritize assessment and patching.

Historical Context

Reported in 2026, this vulnerability emerged during an era marked by increased sophistication in supply chain attacks, cloud infrastructure vulnerabilities, and software-as-a-service (SaaS) security challenges. Security practices during this period emphasized zero-trust architectures, container security, and API protection.

Published

2026-05-12T01:16:46.820

Last Modified

2026-06-17T10:51:54.877

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 9.6 (CRITICAL)

Weaknesses
  • Type: Secondary
    CWE-506
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application tanstack tanstack\/arktype-adapter 1.166.12 Yes
Application tanstack tanstack\/arktype-adapter 1.166.15 Yes
Application tanstack tanstack\/eslint-plugin-router 1.161.9 Yes
Application tanstack tanstack\/eslint-plugin-router 1.161.12 Yes
Application tanstack tanstack\/eslint-plugin-start 0.0.4 Yes
Application tanstack tanstack\/eslint-plugin-start 0.0.7 Yes
Application tanstack tanstack\/history 1.161.9 Yes
Application tanstack tanstack\/history 1.161.12 Yes
Application tanstack tanstack\/nitro-v2-vite-plugin 1.154.12 Yes
Application tanstack tanstack\/nitro-v2-vite-plugin 1.154.15 Yes
Application tanstack tanstack\/react-router 1.169.5 Yes
Application tanstack tanstack\/react-router 1.169.8 Yes
Application tanstack tanstack\/react-router-devtools 1.166.16 Yes
Application tanstack tanstack\/react-router-devtools 1.166.19 Yes
Application tanstack tanstack\/react-router-ssr-query 1.166.15 Yes
Application tanstack tanstack\/react-router-ssr-query 1.166.18 Yes
Application tanstack tanstack\/react-start 1.167.68 Yes
Application tanstack tanstack\/react-start 1.167.71 Yes
Application tanstack tanstack\/react-start-client 1.166.51 Yes
Application tanstack tanstack\/react-start-client 1.166.54 Yes
Application tanstack tanstack\/react-start-rsc 0.0.47 Yes
Application tanstack tanstack\/react-start-rsc 0.0.50 Yes
Application tanstack tanstack\/react-start-server 1.166.55 Yes
Application tanstack tanstack\/react-start-server 1.166.58 Yes
Application tanstack tanstack\/router-cli 1.166.46 Yes
Application tanstack tanstack\/router-cli 1.166.49 Yes
Application tanstack tanstack\/router-core 1.169.5 Yes
Application tanstack tanstack\/router-core 1.169.8 Yes
Application tanstack tanstack\/router-devtools 1.166.16 Yes
Application tanstack tanstack\/router-devtools 1.166.19 Yes
Application tanstack tanstack\/router-devtools-core 1.167.6 Yes
Application tanstack tanstack\/router-devtools-core 1.167.9 Yes
Application tanstack tanstack\/router-generator 1.166.45 Yes
Application tanstack tanstack\/router-generator 1.166.48 Yes
Application tanstack tanstack\/router-plugin 1.167.38 Yes
Application tanstack tanstack\/router-plugin 1.167.41 Yes
Application tanstack tanstack\/router-ssr-query-core 1.168.3 Yes
Application tanstack tanstack\/router-ssr-query-core 1.168.6 Yes
Application tanstack tanstack\/router-utils 1.161.11 Yes
Application tanstack tanstack\/router-utils 1.161.14 Yes
Application tanstack tanstack\/router-vite-plugin 1.166.53 Yes
Application tanstack tanstack\/router-vite-plugin 1.166.56 Yes
Application tanstack tanstack\/solid-router 1.169.5 Yes
Application tanstack tanstack\/solid-router 1.169.8 Yes
Application tanstack tanstack\/solid-router-devtools 1.166.16 Yes
Application tanstack tanstack\/solid-router-devtools 1.166.19 Yes
Application tanstack tanstack\/solid-router-ssr-query 1.166.15 Yes
Application tanstack tanstack\/solid-router-ssr-query 1.166.18 Yes
Application tanstack tanstack\/solid-start 1.167.65 Yes
Application tanstack tanstack\/solid-start 1.167.68 Yes
Application tanstack tanstack\/solid-start-client 1.166.50 Yes
Application tanstack tanstack\/solid-start-client 1.166.53 Yes
Application tanstack tanstack\/solid-start-server 1.166.54 Yes
Application tanstack tanstack\/solid-start-server 1.166.57 Yes
Application tanstack tanstack\/start-client-core 1.168.5 Yes
Application tanstack tanstack\/start-client-core 1.168.8 Yes
Application tanstack tanstack\/start-fn-stubs 1.161.9 Yes
Application tanstack tanstack\/start-fn-stubs 1.161.12 Yes
Application tanstack tanstack\/start-plugin-core 1.169.23 Yes
Application tanstack tanstack\/start-plugin-core 1.169.26 Yes
Application tanstack tanstack\/start-server-core 1.167.33 Yes
Application tanstack tanstack\/start-server-core 1.167.36 Yes
Application tanstack tanstack\/start-static-server-functions 1.166.44 Yes
Application tanstack tanstack\/start-static-server-functions 1.166.47 Yes
Application tanstack tanstack\/start-storage-context 1.166.38 Yes
Application tanstack tanstack\/start-storage-context 1.166.41 Yes
Application tanstack tanstack\/valibot-adapter 1.166.12 Yes
Application tanstack tanstack\/valibot-adapter 1.166.15 Yes
Application tanstack tanstack\/virtual-file-routes 1.161.10 Yes
Application tanstack tanstack\/virtual-file-routes 1.161.13 Yes
Application tanstack tanstack\/vue-router 1.169.5 Yes
Application tanstack tanstack\/vue-router 1.169.8 Yes
Application tanstack tanstack\/vue-router-devtools 1.166.16 Yes
Application tanstack tanstack\/vue-router-devtools 1.166.19 Yes
Application tanstack tanstack\/vue-router-ssr-query 1.166.15 Yes
Application tanstack tanstack\/vue-router-ssr-query 1.166.18 Yes
Application tanstack tanstack\/vue-start 1.167.61 Yes
Application tanstack tanstack\/vue-start 1.167.64 Yes
Application tanstack tanstack\/vue-start-client 1.166.46 Yes
Application tanstack tanstack\/vue-start-client 1.166.49 Yes
Application tanstack tanstack\/vue-start-server 1.166.50 Yes
Application tanstack tanstack\/vue-start-server 1.166.53 Yes
Application tanstack tanstack\/zod-adapter 1.166.12 Yes
Application tanstack tanstack\/zod-adapter 1.166.15 Yes
Application mistral mistralai 2.4.6 Yes
Application mistral mistralai\/mistralai 2.2.3 Yes
Application mistral mistralai\/mistralai 2.2.4 Yes
Application mistral mistralai\/mistralai-azure 1.7.2 Yes
Application mistral mistralai\/mistralai-azure 1.7.3 Yes
Application mistral mistralai\/mistralai-gcp 1.7.2 Yes
Application mistral mistralai\/mistralai-gcp 1.7.3 Yes
Application antoinebcx ml-toolkit-ts 1.0.4 Yes
Application antoinebcx ml-toolkit-ts 1.0.5 Yes
Application antoinebcx ml-toolkit-ts\/preprocessing 1.0.2 Yes
Application antoinebcx ml-toolkit-ts\/preprocessing 1.0.3 Yes
Application antoinebcx ml-toolkit-ts\/xgboost 1.0.3 Yes
Application antoinebcx ml-toolkit-ts\/xgboost 1.0.4 Yes
Application beproduct beproduct\/nestjs-auth 0.1.2 Yes
Application beproduct beproduct\/nestjs-auth 0.1.3 Yes
Application beproduct beproduct\/nestjs-auth 0.1.4 Yes
Application beproduct beproduct\/nestjs-auth 0.1.5 Yes
Application beproduct beproduct\/nestjs-auth 0.1.6 Yes
Application beproduct beproduct\/nestjs-auth 0.1.7 Yes
Application beproduct beproduct\/nestjs-auth 0.1.8 Yes
Application beproduct beproduct\/nestjs-auth 0.1.9 Yes
Application beproduct beproduct\/nestjs-auth 0.1.10 Yes
Application beproduct beproduct\/nestjs-auth 0.1.11 Yes
Application beproduct beproduct\/nestjs-auth 0.1.12 Yes
Application beproduct beproduct\/nestjs-auth 0.1.13 Yes
Application beproduct beproduct\/nestjs-auth 0.1.14 Yes
Application beproduct beproduct\/nestjs-auth 0.1.15 Yes
Application beproduct beproduct\/nestjs-auth 0.1.16 Yes
Application beproduct beproduct\/nestjs-auth 0.1.17 Yes
Application beproduct beproduct\/nestjs-auth 0.1.19 Yes
Application christianalares git-git-git 1.0.8 Yes
Application christianalares git-git-git 1.0.9 Yes
Application christianalares git-git-git 1.0.10 Yes
Application christianalares git-git-git 1.0.12 Yes
Application christianalares git_branch_selector 1.3.3 Yes
Application christianalares git_branch_selector 1.3.4 Yes
Application christianalares git_branch_selector 1.3.5 Yes
Application christianalares git_branch_selector 1.3.7 Yes
Application christianalares nextmove-mcp 0.1.3 Yes
Application christianalares nextmove-mcp 0.1.4 Yes
Application christianalares nextmove-mcp 0.1.5 Yes
Application christianalares nextmove-mcp 0.1.7 Yes
Application christianalares tolka\/cli 1.0.2 Yes
Application christianalares tolka\/cli 1.0.3 Yes
Application christianalares tolka\/cli 1.0.4 Yes
Application christianalares tolka\/cli 1.0.6 Yes
Application multiagentcognition cmux-agent-mcp 0.1.3 Yes
Application multiagentcognition cmux-agent-mcp 0.1.4 Yes
Application multiagentcognition cmux-agent-mcp 0.1.5 Yes
Application multiagentcognition cmux-agent-mcp 0.1.6 Yes
Application multiagentcognition cmux-agent-mcp 0.1.7 Yes
Application multiagentcognition cmux-agent-mcp 0.1.8 Yes
Application abhishake1 supersurkhet\/cli 0.0.2 Yes
Application abhishake1 supersurkhet\/cli 0.0.3 Yes
Application abhishake1 supersurkhet\/cli 0.0.4 Yes
Application abhishake1 supersurkhet\/cli 0.0.5 Yes
Application abhishake1 supersurkhet\/cli 0.0.6 Yes
Application abhishake1 supersurkhet\/cli 0.0.7 Yes
Application abhishake1 supersurkhet\/sdk 0.0.2 Yes
Application abhishake1 supersurkhet\/sdk 0.0.3 Yes
Application abhishake1 supersurkhet\/sdk 0.0.4 Yes
Application abhishake1 supersurkhet\/sdk 0.0.5 Yes
Application abhishake1 supersurkhet\/sdk 0.0.6 Yes
Application abhishake1 supersurkhet\/sdk 0.0.7 Yes
Application abhishake1 taskflow-corp\/cli 0.1.24 Yes
Application abhishake1 taskflow-corp\/cli 0.1.25 Yes
Application abhishake1 taskflow-corp\/cli 0.1.26 Yes
Application abhishake1 taskflow-corp\/cli 0.1.27 Yes
Application abhishake1 taskflow-corp\/cli 0.1.28 Yes
Application abhishake1 taskflow-corp\/cli 0.1.29 Yes
Application kilbot tallyui\/components 1.0.1 Yes
Application kilbot tallyui\/components 1.0.2 Yes
Application kilbot tallyui\/components 1.0.3 Yes
Application kilbot tallyui\/connector-medusa 1.0.1 Yes
Application kilbot tallyui\/connector-medusa 1.0.2 Yes
Application kilbot tallyui\/connector-medusa 1.0.3 Yes
Application kilbot tallyui\/connector-shopify 1.0.1 Yes
Application kilbot tallyui\/connector-shopify 1.0.2 Yes
Application kilbot tallyui\/connector-shopify 1.0.3 Yes
Application kilbot tallyui\/connector-vendure 1.0.1 Yes
Application kilbot tallyui\/connector-vendure 1.0.2 Yes
Application kilbot tallyui\/connector-vendure 1.0.3 Yes
Application kilbot tallyui\/connector-woocommerce 1.0.1 Yes
Application kilbot tallyui\/connector-woocommerce 1.0.2 Yes
Application kilbot tallyui\/connector-woocommerce 1.0.3 Yes
Application kilbot tallyui\/core 0.2.1 Yes
Application kilbot tallyui\/core 0.2.2 Yes
Application kilbot tallyui\/core 0.2.3 Yes
Application kilbot tallyui\/database 1.0.1 Yes
Application kilbot tallyui\/database 1.0.2 Yes
Application kilbot tallyui\/database 1.0.3 Yes
Application kilbot tallyui\/pos 0.1.1 Yes
Application kilbot tallyui\/pos 0.1.2 Yes
Application kilbot tallyui\/pos 0.1.3 Yes
Application kilbot tallyui\/storage-sqlite 0.2.1 Yes
Application kilbot tallyui\/storage-sqlite 0.2.2 Yes
Application kilbot tallyui\/storage-sqlite 0.2.3 Yes
Application kilbot tallyui\/theme 0.2.1 Yes
Application kilbot tallyui\/theme 0.2.2 Yes
Application kilbot tallyui\/theme 0.2.3 Yes
Application matheuspergoli draftauth\/client 0.2.1 Yes
Application matheuspergoli draftauth\/client 0.2.2 Yes
Application matheuspergoli draftauth\/core 0.13.1 Yes
Application matheuspergoli draftauth\/core 0.13.2 Yes
Application matheuspergoli draftlab\/auth 0.24.1 Yes
Application matheuspergoli draftlab\/auth 0.24.2 Yes
Application matheuspergoli draftlab\/auth-router 0.5.1 Yes
Application matheuspergoli draftlab\/auth-router 0.5.2 Yes
Application matheuspergoli draftlab\/db 0.16.1 Yes
Application matheuspergoli draftlab\/db 0.16.2 Yes
Application matheuspergoli simple_type-safe_actions 0.8.3 Yes
Application matheuspergoli simple_type-safe_actions 0.8.4 Yes
Application neilcochran cross-stitch 1.1.3 Yes
Application neilcochran cross-stitch 1.1.4 Yes
Application neilcochran cross-stitch 1.1.6 Yes
Application neilcochran squawk\/airports 0.6.2 Yes
Application neilcochran squawk\/airports 0.6.3 Yes
Application neilcochran squawk\/airports 0.6.5 Yes
Application neilcochran squawk\/airspace 0.8.1 Yes
Application neilcochran squawk\/airspace 0.8.2 Yes
Application neilcochran squawk\/airspace 0.8.4 Yes
Application neilcochran squawk\/airspace-data 0.5.3 Yes
Application neilcochran squawk\/airspace-data 0.5.4 Yes
Application neilcochran squawk\/airspace-data 0.5.6 Yes
Application neilcochran squawk\/airway-data 0.5.4 Yes
Application neilcochran squawk\/airway-data 0.5.5 Yes
Application neilcochran squawk\/airway-data 0.5.7 Yes
Application neilcochran squawk\/airways 0.4.2 Yes
Application neilcochran squawk\/airways 0.4.3 Yes
Application neilcochran squawk\/airways 0.4.5 Yes
Application neilcochran squawk\/fix-data 0.6.4 Yes
Application neilcochran squawk\/fix-data 0.6.5 Yes
Application neilcochran squawk\/fix-data 0.6.7 Yes
Application neilcochran squawk\/fixes 0.3.2 Yes
Application neilcochran squawk\/fixes 0.3.3 Yes
Application neilcochran squawk\/fixes 0.3.5 Yes
Application neilcochran squawk\/flight-math 0.5.4 Yes
Application neilcochran squawk\/flight-math 0.5.5 Yes
Application neilcochran squawk\/flight-math 0.5.7 Yes
Application neilcochran squawk\/flightplan 0.5.2 Yes
Application neilcochran squawk\/flightplan 0.5.3 Yes
Application neilcochran squawk\/flightplan 0.5.5 Yes
Application neilcochran squawk\/geo 0.4.4 Yes
Application neilcochran squawk\/geo 0.4.5 Yes
Application neilcochran squawk\/geo 0.4.7 Yes
Application neilcochran squawk\/icao-registry 0.5.2 Yes
Application neilcochran squawk\/icao-registry 0.5.3 Yes
Application neilcochran squawk\/icao-registry 0.5.5 Yes
Application neilcochran squawk\/icao-registry-data 0.8.4 Yes
Application neilcochran squawk\/icao-registry-data 0.8.5 Yes
Application neilcochran squawk\/icao-registry-data 0.8.7 Yes
Application neilcochran squawk\/mcp 0.9.1 Yes
Application neilcochran squawk\/mcp 0.9.2 Yes
Application neilcochran squawk\/mcp 0.9.4 Yes
Application neilcochran squawk\/navaid-data 0.6.4 Yes
Application neilcochran squawk\/navaid-data 0.6.5 Yes
Application neilcochran squawk\/navaid-data 0.6.7 Yes
Application neilcochran squawk\/navaids 0.4.2 Yes
Application neilcochran squawk\/navaids 0.4.3 Yes
Application neilcochran squawk\/navaids 0.4.5 Yes
Application neilcochran squawk\/notams 0.3.6 Yes
Application neilcochran squawk\/notams 0.3.7 Yes
Application neilcochran squawk\/notams 0.3.9 Yes
Application neilcochran squawk\/procedure-data 0.7.3 Yes
Application neilcochran squawk\/procedure-data 0.7.4 Yes
Application neilcochran squawk\/procedure-data 0.7.6 Yes
Application neilcochran squawk\/procedures 0.5.2 Yes
Application neilcochran squawk\/procedures 0.5.3 Yes
Application neilcochran squawk\/procedures 0.5.5 Yes
Application neilcochran squawk\/types 0.8.1 Yes
Application neilcochran squawk\/types 0.8.2 Yes
Application neilcochran squawk\/types 0.8.4 Yes
Application neilcochran squawk\/units 0.4.3 Yes
Application neilcochran squawk\/units 0.4.4 Yes
Application neilcochran squawk\/units 0.4.6 Yes
Application neilcochran squawk\/weather 0.5.6 Yes
Application neilcochran squawk\/weather 0.5.7 Yes
Application neilcochran squawk\/weather 0.5.9 Yes
Application neilcochran ts-dna 3.0.1 Yes
Application neilcochran ts-dna 3.0.2 Yes
Application neilcochran ts-dna 3.0.4 Yes
Application neilcochran wot-api 0.8.1 Yes
Application neilcochran wot-api 0.8.2 Yes
Application neilcochran wot-api 0.8.4 Yes
Application agentworkhq agentwork-cli 0.1.4 Yes
Application agentworkhq agentwork-cli 0.1.5 Yes
Application dirigible dirigible-ai\/sdk 0.6.2 Yes
Application dirigible dirigible-ai\/sdk 0.6.3 Yes
Application guardrailsai guardrails_ai 0.10.1 Yes
Application linuxfoundation opensearch 3.6.2 Yes
Application mesa mesadev\/rest 0.28.3 Yes
Application mesa mesadev\/saguaro 0.4.22 Yes
Application mesa mesadev\/sdk 0.28.3 Yes
Application uipath uipath\/access-policy-sdk 0.3.1 Yes
Application uipath uipath\/access-policy-tool 0.3.1 Yes
Application uipath uipath\/admin-tool 0.1.1 Yes
Application uipath uipath\/agent-sdk 1.0.2 Yes
Application uipath uipath\/agent-tool 1.0.1 Yes
Application uipath uipath\/agent.sdk 0.0.18 Yes
Application uipath uipath\/aops-policy-tool 0.3.1 Yes
Application uipath uipath\/ap-chat 1.5.7 Yes
Application uipath uipath\/api-workflow-tool 1.0.1 Yes
Application uipath uipath\/apollo-core 5.9.2 Yes
Application uipath uipath\/apollo-react 4.24.5 Yes
Application uipath uipath\/apollo-wind 2.16.2 Yes
Application uipath uipath\/auth 1.0.1 Yes
Application uipath uipath\/case-tool 1.0.1 Yes
Application uipath uipath\/cli 1.0.1 Yes
Application uipath uipath\/codedagent-tool 1.0.1 Yes
Application uipath uipath\/codedagents-tool 0.1.12 Yes
Application uipath uipath\/codedapp-tool 1.0.1 Yes
Application uipath uipath\/common 1.0.1 Yes
Application uipath uipath\/context-grounding-tool 0.1.1 Yes
Application uipath uipath\/data-fabric-tool 1.0.2 Yes
Application uipath uipath\/docsai-tool 1.0.1 Yes
Application uipath uipath\/filesystem 1.0.1 Yes
Application uipath uipath\/flow-tool 1.0.2 Yes
Application uipath uipath\/functions-tool 1.0.1 Yes
Application uipath uipath\/gov-tool 0.3.1 Yes
Application uipath uipath\/identity-tool 0.1.1 Yes
Application uipath uipath\/insights-sdk 1.0.1 Yes
Application uipath uipath\/insights-tool 1.0.1 Yes
Application uipath uipath\/integrationservice-sdk 1.0.2 Yes
Application uipath uipath\/integrationservice-tool 1.0.2 Yes
Application uipath uipath\/llmgw-tool 1.0.1 Yes
Application uipath uipath\/maestro-sdk 1.0.1 Yes
Application uipath uipath\/maestro-tool 1.0.1 Yes
Application uipath uipath\/orchestrator-tool 1.0.1 Yes
Application uipath uipath\/packager-tool-apiworkflow 0.0.19 Yes
Application uipath uipath\/packager-tool-bpmn 0.0.9 Yes
Application uipath uipath\/packager-tool-case 0.0.9 Yes
Application uipath uipath\/packager-tool-connector 0.0.19 Yes
Application uipath uipath\/packager-tool-flow 0.0.19 Yes
Application uipath uipath\/packager-tool-functions 0.1.1 Yes
Application uipath uipath\/packager-tool-webapp 1.0.6 Yes
Application uipath uipath\/packager-tool-workflowcompiler 0.0.16 Yes
Application uipath uipath\/packager-tool-workflowcompiler-browser 0.0.34 Yes
Application uipath uipath\/platform-tool 1.0.1 Yes
Application uipath uipath\/project-packager 1.1.16 Yes
Application uipath uipath\/resource-tool 1.0.1 Yes
Application uipath uipath\/resourcecatalog-tool 0.1.1 Yes
Application uipath uipath\/resources-tool 0.1.11 Yes
Application uipath uipath\/robot 1.3.4 Yes
Application uipath uipath\/rpa-legacy-tool 1.0.1 Yes
Application uipath uipath\/rpa-tool 0.9.5 Yes
Application uipath uipath\/solution-packager 0.0.35 Yes
Application uipath uipath\/solution-tool 1.0.1 Yes
Application uipath uipath\/solutionpackager-sdk 1.0.11 Yes
Application uipath uipath\/solutionpackager-tool-core 0.0.34 Yes
Application uipath uipath\/tasks-tool 1.0.1 Yes
Application uipath uipath\/telemetry 0.0.7 Yes
Application uipath uipath\/test-manager-tool 1.0.2 Yes
Application uipath uipath\/tool-workflowcompiler 0.0.12 Yes
Application uipath uipath\/traces-tool 1.0.1 Yes
Application uipath uipath\/ui-widgets-multi-file-upload 1.0.1 Yes
Application uipath uipath\/uipath-python-bridge 1.0.1 Yes
Application uipath uipath\/vertical-solutions-tool 1.0.1 Yes
Application uipath uipath\/vss 0.1.6 Yes
Application uipath uipath\/widget.sdk 1.2.3 Yes
References

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For tanstack's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.