TanStack Start's security fix for CVE-2026-102989 is now available. Please upgrade and redeploy affected apps.
Thanks to Lovable for helping us discover and fix it.
tanstack.com/blog/tanstac...
tanstack.com
TanStack Start security update: CVE-2026-102989 | TanStack Blog
A fix for a reflected XSS vulnerability in TanStack Start is available on npm. Upgrade and redeploy affected applications.