| 315991 | Multiple Node.js Modules compromised in self-spreading npm supply chain attack (mini-Shai-Hulud) (05/11/2026) | Nessus | Misc. | critical |
| 441730 | SCA: security update for @tanstack/arktype-adapter, @tanstack/eslint-plugin-router, @tanstack/eslint-plugin-start, @tanstack/history, @tanstack/nitro-v2-vite-plugin, @tanstack/react-router, @tanstack/react-router-devtools, @tanstack/react-router-ssr-query, @tanstack/react-start, @tanstack/react-start-client, @tanstack/react-start-rsc, @tanstack/react-start-server, @tanstack/router-cli, @tanstack/router-core, @tanstack/router-devtools, @tanstack/router-devtools-core, @tanstack/router-generator, @tanstack/router-plugin, @tanstack/router-ssr-query-core, @tanstack/router-utils, @tanstack/router-vite-plugin, @tanstack/solid-router, @tanstack/solid-router-devtools, @tanstack/solid-router-ssr-query, @tanstack/solid-start, @tanstack/solid-start-client, @tanstack/solid-start-server, @tanstack/start-client-core, @tanstack/start-fn-stubs, @tanstack/start-plugin-core, @tanstack/start-server-core, @tanstack/start-static-server-functions, @tanstack/start-storage-context, @tanstack/valibot-adapter, @tanstack/virtual-file-routes, @tanstack/vue-router, @tanstack/vue-router-devtools, @tanstack/vue-router-ssr-query, @tanstack/vue-start, @tanstack/vue-start-client, @tanstack/vue-start-server, @tanstack/zod-adapter (GHSA-g7cv-rxg3-hmpx) | Tenable Cloud Security | SCA Checks | critical |
| 441730 | SCA: security update for @tanstack/arktype-adapter, @tanstack/eslint-plugin-router, @tanstack/eslint-plugin-start, @tanstack/history, @tanstack/nitro-v2-vite-plugin, @tanstack/react-router, @tanstack/react-router-devtools, @tanstack/react-router-ssr-query, @tanstack/react-start, @tanstack/react-start-client, @tanstack/react-start-rsc, @tanstack/react-start-server, @tanstack/router-cli, @tanstack/router-core, @tanstack/router-devtools, @tanstack/router-devtools-core, @tanstack/router-generator, @tanstack/router-plugin, @tanstack/router-ssr-query-core, @tanstack/router-utils, @tanstack/router-vite-plugin, @tanstack/solid-router, @tanstack/solid-router-devtools, @tanstack/solid-router-ssr-query, @tanstack/solid-start, @tanstack/solid-start-client, @tanstack/solid-start-server, @tanstack/start-client-core, @tanstack/start-fn-stubs, @tanstack/start-plugin-core, @tanstack/start-server-core, @tanstack/start-static-server-functions, @tanstack/start-storage-context, @tanstack/valibot-adapter, @tanstack/virtual-file-routes, @tanstack/vue-router, @tanstack/vue-router-devtools, @tanstack/vue-router-ssr-query, @tanstack/vue-start, @tanstack/vue-start-client, @tanstack/vue-start-server, @tanstack/zod-adapter (GHSA-g7cv-rxg3-hmpx) | Tenable Self-Hosted Container Security | SCA Checks | critical |