https://patchfirst.co/vendor/tanstack/New and newly exploited TanStack CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 13:00:36 GMThttps://patchfirst.co/cve/CVE-2026-102989/CVE-2026-102989Tue, 13 Oct 2026 00:00:00 GMTTanStack · router. Not in CISA KEV. EPSS 0.5% (higher than 45.6% of CVEs). CVSS 9.3 CRITICAL. Priority 17.8 of 100.https://patchfirst.co/cve/CVE-2026-45321/CVE-2026-45321#kevWed, 27 May 2026 00:00:00 GMTTanStack · TanStack. In CISA KEV since 2026-05-27, known ransomware use. ENISA EUVD lists it as exploited. EPSS 3.3% (higher than 88.4% of CVEs). CVSS 9.6 CRITICAL. Public exploit code exists. ATT&CK: T1195.002 Compromise Software Supply Chain; T1528 Steal Application Access Token. Named in 1 threat report. Priority 86.3 of 100.kevransomwarepublic-exploitT1195.002T1528