A TanStack Start vulnerability, CVE-2026-102989 (CVSS 9.3), allows unauthenticated reflected XSS via crafted links. Upgrade to the patched packages. Related Posts: Palo Alto PAN-OS RCE Vulnerability CVE-2026-0322 Actively Exploited in the Wild F5 Patches Three NGINX Vulnerabilities Allowing Memory Corruption and Remote Code Execution EC-CUBE AmazonPay Plugin Vulnerability CVE-2026-103671 Actively Exploited in the Wild to Steal Account Data The post TanStack CVE-2026-102989 (CVSS 9.3) Reflected XSS Hits Ecosystem With 98M Monthly Downloads appeared first on Daily CyberSecurity.