https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 18:15:31 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-159748 EUVD-2026-159748 https://cve.radiocsirt.org/vuln/euvd-2026-159748 https://cve.radiocsirt.org/vuln/fkie_cve-2024-24558 <p>TanStack Query supplies asynchronous state management, server-state utilities and data fetching for the web. The `@tanstack/react-query-next-experimental` NPM package is vulnerable to a cross-site scripting vulnerability. To exploit this, an attacker would need to either inject malicious input or arrange to have malicious input be returned from an endpoint. To fix this issue, please update to version 5.18.0 or later.</p> <p>TanStack Query supplies asynchronous state management, server-state utilities and data fetching for the web. The `@tanstack/react-query-next-experimental` NPM package is vulnerable to a cross-site scripting vulnerability. To exploit this, an attacker would need to either inject malicious input or arrange to have malicious input be returned from an endpoint. To fix this issue, please update to version 5.18.0 or later.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-24558 https://cve.radiocsirt.org/vuln/ghsa-997g-27x8-43rf <p><strong>Affected:</strong> npm: @tanstack/react-query-next-experimental</p> <p>### Impact</p> <p>The `@tanstack/react-query-next-experimental` NPM package is vulnerable to a cross-site scripting vulnerability. To exploit this, an attacker would need to either inject malicious input or arrange to have malicious input be returned from an endpoint.</p> <p>This vulnerability arises from improper handling of untrusted input when `@tanstack/react-query-next-experimental` performs server-side rendering of HTML pages. To fix this vulnerability, we implemented appropriate escaping to prevent javascript injection into rendered pages.</p> <p>### Patches</p> <p>To fix this issue, please update to version 5.18.0 or later.</p> <p>### Workarounds</p> <p>There are no known workarounds for this issue. Please update to version 5.18.0 or later.</p> <p><strong>Affected:</strong> npm: @tanstack/react-query-next-experimental</p> <p>### Impact</p> <p>The `@tanstack/react-query-next-experimental` NPM package is vulnerable to a cross-site scripting vulnerability. To exploit this, an attacker would need to either inject malicious input or arrange to have malicious input be returned from an endpoint.</p> <p>This vulnerability arises from improper handling of untrusted input when `@tanstack/react-query-next-experimental` performs server-side rendering of HTML pages. To fix this vulnerability, we implemented appropriate escaping to prevent javascript injection into rendered pages.</p> <p>### Patches</p> <p>To fix this issue, please update to version 5.18.0 or later.</p> <p>### Workarounds</p> <p>There are no known workarounds for this issue. Please update to version 5.18.0 or later.</p> https://cve.radiocsirt.org/vuln/ghsa-997g-27x8-43rf https://cve.radiocsirt.org/vuln/gsd-2024-24558 gsd-2024-24558 https://cve.radiocsirt.org/vuln/gsd-2024-24558