CASCACascade Atlas

Evidence dossier

CVE-2026-45321

Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys

67.1–82.1Priority evidence range
As known Jul 19, 2026, 5:00 AM UTCgen-56ccdaf9

Normalized restatement

On 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @tanstack/* packages were published to the npm registry. The publishes were authenticated via the legitimate GitHub Actions OIDC trusted-publisher binding for TanStack/router, but the publish workflow itself was not modified. The attacker chained three known vulnerability classes — a pull_request_target "Pwn Request" misconfiguration, GitHub Actions cache poisoning across the fork↔base trust boundary, and runtime memory extraction of the OIDC token from the Actions runner process — to publish credential-stealing malware under a trusted identity. Each affected package received exactly two malicious versions, published a few minutes apart.

State
PUBLISHED
Published
May 12, 2026
Updated
May 28, 2026
Evidence coverage
85%
CISA KEVCatalog member

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

FIRST EPSS2.34%

2026-07-18 · v2026.06.15 · percentile 81.7%

Source stateNo scored conflict

Distinct CVSS assessments remain side by side; none are averaged.

Source comparison

Who said what

CISA-ADPindependent enrichment
container

CISA ADP Vulnrichment

GitHub_Moriginal assertion
container

Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys

CISA KEVoriginal assertion
observed_exploitation

TanStack Unspecified Vulnerability

FIRST EPSSoriginal assertion
model_probability

Probability 0.023420000000; percentile 0.817300000000

Applicability

Cited product scope

Trace impact →
@tanstackarktype-adapter
[{"status": "affected", "version": "1.166.12"}, {"status": "affected", "version": "1.166.15"}]unknown
@tanstackeslint-plugin-router
[{"status": "affected", "version": "1.161.9"}, {"status": "affected", "version": "1.161.12"}]unknown
@tanstackeslint-plugin-start
[{"status": "affected", "version": "0.0.4"}, {"status": "affected", "version": "0.0.7"}]unknown
@tanstackhistory
[{"status": "affected", "version": "1.161.9"}, {"status": "affected", "version": "1.161.12"}]unknown
@tanstacknitro-v2-vite-plugin
[{"status": "affected", "version": "1.154.12"}, {"status": "affected", "version": "1.154.15"}]unknown
@tanstackouter-vite-plugin
[{"status": "affected", "version": "1.166.53"}, {"status": "affected", "version": "1.166.56"}]unknown
@tanstackreact-router
[{"status": "affected", "version": "1.169.5"}, {"status": "affected", "version": "1.169.8"}]unknown
@tanstackreact-router-devtools
[{"status": "affected", "version": "1.166.16"}, {"status": "affected", "version": "1.166.19"}]unknown
@tanstackreact-router-ssr-query
[{"status": "affected", "version": "1.166.15"}, {"status": "affected", "version": "1.166.18"}]unknown
@tanstackreact-start
[{"status": "affected", "version": "1.167.68"}, {"status": "affected", "version": "1.167.71"}]unknown
@tanstackreact-start-client
[{"status": "affected", "version": "1.166.51"}, {"status": "affected", "version": "1.166.54"}]unknown
@tanstackreact-start-rsc
[{"status": "affected", "version": "0.0.47"}, {"status": "affected", "version": "0.0.50"}]unknown
@tanstackreact-start-server
[{"status": "affected", "version": "1.166.55"}, {"status": "affected", "version": "1.166.58"}]unknown
@tanstackrouter-cli
[{"status": "affected", "version": "1.166.46"}, {"status": "affected", "version": "1.166.49"}]unknown
@tanstackrouter-core
[{"status": "affected", "version": "1.169.5"}, {"status": "affected", "version": "1.169.8"}]unknown
@tanstackrouter-devtools
[{"status": "affected", "version": "1.166.16"}, {"status": "affected", "version": "1.166.19"}]unknown
@tanstackrouter-devtools-core
[{"status": "affected", "version": "1.167.6"}, {"status": "affected", "version": "1.167.9"}]unknown
@tanstackrouter-generator
[{"status": "affected", "version": "1.166.45"}, {"status": "affected", "version": "1.166.48"}]unknown
@tanstackrouter-plugin
[{"status": "affected", "version": "1.167.38"}, {"status": "affected", "version": "1.167.41"}]unknown
@tanstackrouter-ssr-query-core
[{"status": "affected", "version": "1.168.3"}, {"status": "affected", "version": "1.168.6"}]unknown
@tanstackrouter-utils
[{"status": "affected", "version": "1.161.11"}, {"status": "affected", "version": "1.161.14"}]unknown
@tanstacksolid-router
[{"status": "affected", "version": "1.169.5"}, {"status": "affected", "version": "1.169.8"}]unknown
@tanstacksolid-router-devtools
[{"status": "affected", "version": "1.166.16"}, {"status": "affected", "version": "1.166.19"}]unknown
@tanstacksolid-router-ssr-query
[{"status": "affected", "version": "1.166.15"}, {"status": "affected", "version": "1.166.18"}]unknown
@tanstacksolid-start
[{"status": "affected", "version": "1.167.65"}, {"status": "affected", "version": "1.167.68"}]unknown
@tanstacksolid-start-client
[{"status": "affected", "version": "1.166.50"}, {"status": "affected", "version": "1.166.53"}]unknown
@tanstacksolid-start-server
[{"status": "affected", "version": "1.166.54"}, {"status": "affected", "version": "1.166.57"}]unknown
@tanstackstart-client-core
[{"status": "affected", "version": "1.168.5"}, {"status": "affected", "version": "1.168.8"}]unknown
@tanstackstart-fn-stubs
[{"status": "affected", "version": "1.161.9"}, {"status": "affected", "version": "1.161.12"}]unknown
@tanstackstart-plugin-core
[{"status": "affected", "version": "1.169.23"}, {"status": "affected", "version": "1.169.26"}]unknown
@tanstackstart-server-core
[{"status": "affected", "version": "1.167.33"}, {"status": "affected", "version": "1.167.36"}]unknown
@tanstackstart-static-server-functions
[{"status": "affected", "version": "1.166.44"}, {"status": "affected", "version": "1.166.47"}]unknown
@tanstackstart-storage-context
[{"status": "affected", "version": "1.166.38"}, {"status": "affected", "version": "1.166.41"}]unknown
@tanstackvalibot-adapter
[{"status": "affected", "version": "1.166.12"}, {"status": "affected", "version": "1.166.15"}]unknown
@tanstackvirtual-file-routes
[{"status": "affected", "version": "1.161.10"}, {"status": "affected", "version": "1.161.13"}]unknown
@tanstackvue-router
[{"status": "affected", "version": "1.169.5"}, {"status": "affected", "version": "1.169.8"}]unknown
@tanstackvue-router-devtools
[{"status": "affected", "version": "1.166.16"}, {"status": "affected", "version": "1.166.19"}]unknown
@tanstackvue-router-ssr-query
[{"status": "affected", "version": "1.166.15"}, {"status": "affected", "version": "1.166.18"}]unknown
@tanstackvue-start
[{"status": "affected", "version": "1.167.61"}, {"status": "affected", "version": "1.167.64"}]unknown
@tanstackvue-start-client
[{"status": "affected", "version": "1.166.46"}, {"status": "affected", "version": "1.166.49"}]unknown
@tanstackvue-start-server
[{"status": "affected", "version": "1.166.50"}, {"status": "affected", "version": "1.166.53"}]unknown
@tanstackzod-adapter
[{"status": "affected", "version": "1.166.12"}, {"status": "affected", "version": "1.166.15"}]unknown
Unknown vendorUnknown product
cpe:2.3:a:abhishake1:supersurkhet\/cli:0.0.2:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:abhishake1:supersurkhet\/cli:0.0.3:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:abhishake1:supersurkhet\/cli:0.0.4:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:abhishake1:supersurkhet\/cli:0.0.5:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:abhishake1:supersurkhet\/cli:0.0.6:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:abhishake1:supersurkhet\/cli:0.0.7:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:abhishake1:supersurkhet\/sdk:0.0.2:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:abhishake1:supersurkhet\/sdk:0.0.3:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:abhishake1:supersurkhet\/sdk:0.0.4:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:abhishake1:supersurkhet\/sdk:0.0.5:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:abhishake1:supersurkhet\/sdk:0.0.6:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:abhishake1:supersurkhet\/sdk:0.0.7:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:abhishake1:taskflow-corp\/cli:0.1.24:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:abhishake1:taskflow-corp\/cli:0.1.25:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:abhishake1:taskflow-corp\/cli:0.1.26:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:abhishake1:taskflow-corp\/cli:0.1.27:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:abhishake1:taskflow-corp\/cli:0.1.28:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:abhishake1:taskflow-corp\/cli:0.1.29:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:agentworkhq:agentwork-cli:0.1.4:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:agentworkhq:agentwork-cli:0.1.5:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:antoinebcx:ml-toolkit-ts:1.0.4:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:antoinebcx:ml-toolkit-ts:1.0.5:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:antoinebcx:ml-toolkit-ts\/preprocessing:1.0.2:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:antoinebcx:ml-toolkit-ts\/preprocessing:1.0.3:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:antoinebcx:ml-toolkit-ts\/xgboost:1.0.3:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:antoinebcx:ml-toolkit-ts\/xgboost:1.0.4:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:beproduct:beproduct\/nestjs-auth:0.1.10:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:beproduct:beproduct\/nestjs-auth:0.1.11:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:beproduct:beproduct\/nestjs-auth:0.1.12:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:beproduct:beproduct\/nestjs-auth:0.1.13:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:beproduct:beproduct\/nestjs-auth:0.1.14:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:beproduct:beproduct\/nestjs-auth:0.1.15:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:beproduct:beproduct\/nestjs-auth:0.1.16:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:beproduct:beproduct\/nestjs-auth:0.1.17:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:beproduct:beproduct\/nestjs-auth:0.1.19:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:beproduct:beproduct\/nestjs-auth:0.1.2:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:beproduct:beproduct\/nestjs-auth:0.1.3:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:beproduct:beproduct\/nestjs-auth:0.1.4:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:beproduct:beproduct\/nestjs-auth:0.1.5:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:beproduct:beproduct\/nestjs-auth:0.1.6:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:beproduct:beproduct\/nestjs-auth:0.1.7:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:beproduct:beproduct\/nestjs-auth:0.1.8:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:beproduct:beproduct\/nestjs-auth:0.1.9:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:christianalares:git_branch_selector:1.3.3:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:christianalares:git_branch_selector:1.3.4:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:christianalares:git_branch_selector:1.3.5:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:christianalares:git_branch_selector:1.3.7:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:christianalares:git-git-git:1.0.10:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:christianalares:git-git-git:1.0.12:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:christianalares:git-git-git:1.0.8:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:christianalares:git-git-git:1.0.9:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:christianalares:nextmove-mcp:0.1.3:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:christianalares:nextmove-mcp:0.1.4:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:christianalares:nextmove-mcp:0.1.5:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:christianalares:nextmove-mcp:0.1.7:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:christianalares:tolka\/cli:1.0.2:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:christianalares:tolka\/cli:1.0.3:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:christianalares:tolka\/cli:1.0.4:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:christianalares:tolka\/cli:1.0.6:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:dirigible:dirigible-ai\/sdk:0.6.2:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:dirigible:dirigible-ai\/sdk:0.6.3:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:guardrailsai:guardrails_ai:0.10.1:*:*:*:*:python:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:kilbot:tallyui\/components:1.0.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:kilbot:tallyui\/components:1.0.2:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:kilbot:tallyui\/components:1.0.3:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:kilbot:tallyui\/connector-medusa:1.0.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:kilbot:tallyui\/connector-medusa:1.0.2:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:kilbot:tallyui\/connector-medusa:1.0.3:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:kilbot:tallyui\/connector-shopify:1.0.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:kilbot:tallyui\/connector-shopify:1.0.2:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:kilbot:tallyui\/connector-shopify:1.0.3:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:kilbot:tallyui\/connector-vendure:1.0.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:kilbot:tallyui\/connector-vendure:1.0.2:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:kilbot:tallyui\/connector-vendure:1.0.3:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:kilbot:tallyui\/connector-woocommerce:1.0.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:kilbot:tallyui\/connector-woocommerce:1.0.2:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:kilbot:tallyui\/connector-woocommerce:1.0.3:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:kilbot:tallyui\/core:0.2.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:kilbot:tallyui\/core:0.2.2:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:kilbot:tallyui\/core:0.2.3:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:kilbot:tallyui\/database:1.0.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:kilbot:tallyui\/database:1.0.2:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:kilbot:tallyui\/database:1.0.3:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:kilbot:tallyui\/pos:0.1.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:kilbot:tallyui\/pos:0.1.2:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:kilbot:tallyui\/pos:0.1.3:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:kilbot:tallyui\/storage-sqlite:0.2.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:kilbot:tallyui\/storage-sqlite:0.2.2:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:kilbot:tallyui\/storage-sqlite:0.2.3:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:kilbot:tallyui\/theme:0.2.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:kilbot:tallyui\/theme:0.2.2:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:kilbot:tallyui\/theme:0.2.3:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:linuxfoundation:opensearch:3.6.2:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:matheuspergoli:draftauth\/client:0.2.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:matheuspergoli:draftauth\/client:0.2.2:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:matheuspergoli:draftauth\/core:0.13.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:matheuspergoli:draftauth\/core:0.13.2:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:matheuspergoli:draftlab\/auth:0.24.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:matheuspergoli:draftlab\/auth:0.24.2:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:matheuspergoli:draftlab\/auth-router:0.5.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:matheuspergoli:draftlab\/auth-router:0.5.2:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:matheuspergoli:draftlab\/db:0.16.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:matheuspergoli:draftlab\/db:0.16.2:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:matheuspergoli:simple_type-safe_actions:0.8.3:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:matheuspergoli:simple_type-safe_actions:0.8.4:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:mesa:mesadev\/rest:0.28.3:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:mesa:mesadev\/saguaro:0.4.22:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:mesa:mesadev\/sdk:0.28.3:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:mistral:mistralai:2.4.6:*:*:*:*:python:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:mistral:mistralai\/mistralai:2.2.3:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:mistral:mistralai\/mistralai:2.2.4:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:mistral:mistralai\/mistralai-azure:1.7.2:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:mistral:mistralai\/mistralai-azure:1.7.3:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:mistral:mistralai\/mistralai-gcp:1.7.2:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:mistral:mistralai\/mistralai-gcp:1.7.3:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:multiagentcognition:cmux-agent-mcp:0.1.3:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:multiagentcognition:cmux-agent-mcp:0.1.4:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:multiagentcognition:cmux-agent-mcp:0.1.5:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:multiagentcognition:cmux-agent-mcp:0.1.6:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:multiagentcognition:cmux-agent-mcp:0.1.7:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:multiagentcognition:cmux-agent-mcp:0.1.8:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:cross-stitch:1.1.3:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:cross-stitch:1.1.4:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:cross-stitch:1.1.6:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/airports:0.6.2:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/airports:0.6.3:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/airports:0.6.5:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/airspace:0.8.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/airspace:0.8.2:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/airspace:0.8.4:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/airspace-data:0.5.3:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/airspace-data:0.5.4:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/airspace-data:0.5.6:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/airway-data:0.5.4:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/airway-data:0.5.5:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/airway-data:0.5.7:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/airways:0.4.2:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/airways:0.4.3:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/airways:0.4.5:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/fix-data:0.6.4:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/fix-data:0.6.5:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/fix-data:0.6.7:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/fixes:0.3.2:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/fixes:0.3.3:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/fixes:0.3.5:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/flight-math:0.5.4:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/flight-math:0.5.5:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/flight-math:0.5.7:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/flightplan:0.5.2:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/flightplan:0.5.3:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/flightplan:0.5.5:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/geo:0.4.4:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/geo:0.4.5:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/geo:0.4.7:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/icao-registry:0.5.2:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/icao-registry:0.5.3:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/icao-registry:0.5.5:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/icao-registry-data:0.8.4:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/icao-registry-data:0.8.5:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/icao-registry-data:0.8.7:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/mcp:0.9.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/mcp:0.9.2:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/mcp:0.9.4:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/navaid-data:0.6.4:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/navaid-data:0.6.5:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/navaid-data:0.6.7:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/navaids:0.4.2:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/navaids:0.4.3:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/navaids:0.4.5:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/notams:0.3.6:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/notams:0.3.7:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/notams:0.3.9:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/procedure-data:0.7.3:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/procedure-data:0.7.4:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/procedure-data:0.7.6:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/procedures:0.5.2:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/procedures:0.5.3:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/procedures:0.5.5:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/types:0.8.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/types:0.8.2:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/types:0.8.4:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/units:0.4.3:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/units:0.4.4:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/units:0.4.6:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/weather:0.5.6:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/weather:0.5.7:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:squawk\/weather:0.5.9:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:ts-dna:3.0.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:ts-dna:3.0.2:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:ts-dna:3.0.4:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:wot-api:0.8.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:wot-api:0.8.2:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:neilcochran:wot-api:0.8.4:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/arktype-adapter:1.166.12:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/arktype-adapter:1.166.15:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/eslint-plugin-router:1.161.12:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/eslint-plugin-router:1.161.9:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/eslint-plugin-start:0.0.4:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/eslint-plugin-start:0.0.7:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/history:1.161.12:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/history:1.161.9:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/nitro-v2-vite-plugin:1.154.12:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/nitro-v2-vite-plugin:1.154.15:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/react-router:1.169.5:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/react-router:1.169.8:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/react-router-devtools:1.166.16:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/react-router-devtools:1.166.19:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/react-router-ssr-query:1.166.15:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/react-router-ssr-query:1.166.18:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/react-start:1.167.68:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/react-start:1.167.71:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/react-start-client:1.166.51:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/react-start-client:1.166.54:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/react-start-rsc:0.0.47:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/react-start-rsc:0.0.50:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/react-start-server:1.166.55:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/react-start-server:1.166.58:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/router-cli:1.166.46:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/router-cli:1.166.49:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/router-core:1.169.5:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/router-core:1.169.8:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/router-devtools:1.166.16:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/router-devtools:1.166.19:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/router-devtools-core:1.167.6:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/router-devtools-core:1.167.9:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/router-generator:1.166.45:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/router-generator:1.166.48:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/router-plugin:1.167.38:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/router-plugin:1.167.41:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/router-ssr-query-core:1.168.3:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/router-ssr-query-core:1.168.6:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/router-utils:1.161.11:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/router-utils:1.161.14:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/router-vite-plugin:1.166.53:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/router-vite-plugin:1.166.56:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/solid-router:1.169.5:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/solid-router:1.169.8:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/solid-router-devtools:1.166.16:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/solid-router-devtools:1.166.19:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/solid-router-ssr-query:1.166.15:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/solid-router-ssr-query:1.166.18:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/solid-start:1.167.65:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/solid-start:1.167.68:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/solid-start-client:1.166.50:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/solid-start-client:1.166.53:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/solid-start-server:1.166.54:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/solid-start-server:1.166.57:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/start-client-core:1.168.5:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/start-client-core:1.168.8:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/start-fn-stubs:1.161.12:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/start-fn-stubs:1.161.9:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/start-plugin-core:1.169.23:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/start-plugin-core:1.169.26:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/start-server-core:1.167.33:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/start-server-core:1.167.36:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/start-static-server-functions:1.166.44:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/start-static-server-functions:1.166.47:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/start-storage-context:1.166.38:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/start-storage-context:1.166.41:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/valibot-adapter:1.166.12:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/valibot-adapter:1.166.15:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/virtual-file-routes:1.161.10:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/virtual-file-routes:1.161.13:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/vue-router:1.169.5:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/vue-router:1.169.8:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/vue-router-devtools:1.166.16:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/vue-router-devtools:1.166.19:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/vue-router-ssr-query:1.166.15:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/vue-router-ssr-query:1.166.18:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/vue-start:1.167.61:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/vue-start:1.167.64:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/vue-start-client:1.166.46:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/vue-start-client:1.166.49:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/vue-start-server:1.166.50:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/vue-start-server:1.166.53:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/zod-adapter:1.166.12:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:tanstack:tanstack\/zod-adapter:1.166.15:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/access-policy-sdk:0.3.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/access-policy-tool:0.3.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/admin-tool:0.1.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/agent.sdk:0.0.18:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/agent-sdk:1.0.2:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/agent-tool:1.0.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/aops-policy-tool:0.3.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/ap-chat:1.5.7:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/api-workflow-tool:1.0.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/apollo-core:5.9.2:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/apollo-react:4.24.5:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/apollo-wind:2.16.2:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/auth:1.0.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/case-tool:1.0.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/cli:1.0.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/codedagents-tool:0.1.12:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/codedagent-tool:1.0.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/codedapp-tool:1.0.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/common:1.0.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/context-grounding-tool:0.1.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/data-fabric-tool:1.0.2:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/docsai-tool:1.0.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/filesystem:1.0.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/flow-tool:1.0.2:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/functions-tool:1.0.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/gov-tool:0.3.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/identity-tool:0.1.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/insights-sdk:1.0.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/insights-tool:1.0.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/integrationservice-sdk:1.0.2:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/integrationservice-tool:1.0.2:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/llmgw-tool:1.0.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/maestro-sdk:1.0.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/maestro-tool:1.0.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/orchestrator-tool:1.0.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/packager-tool-apiworkflow:0.0.19:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/packager-tool-bpmn:0.0.9:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/packager-tool-case:0.0.9:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/packager-tool-connector:0.0.19:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/packager-tool-flow:0.0.19:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/packager-tool-functions:0.1.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/packager-tool-webapp:1.0.6:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/packager-tool-workflowcompiler:0.0.16:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/packager-tool-workflowcompiler-browser:0.0.34:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/platform-tool:1.0.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/project-packager:1.1.16:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/resourcecatalog-tool:0.1.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/resources-tool:0.1.11:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/resource-tool:1.0.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/robot:1.3.4:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/rpa-legacy-tool:1.0.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/rpa-tool:0.9.5:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/solution-packager:0.0.35:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/solutionpackager-sdk:1.0.11:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/solutionpackager-tool-core:0.0.34:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/solution-tool:1.0.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/tasks-tool:1.0.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/telemetry:0.0.7:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/test-manager-tool:1.0.2:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/tool-workflowcompiler:0.0.12:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/traces-tool:1.0.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/uipath-python-bridge:1.0.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/ui-widgets-multi-file-upload:1.0.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/vertical-solutions-tool:1.0.1:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/vss:0.1.6:*:*:*:*:node.js:*:*supported
Unknown vendorUnknown product
cpe:2.3:a:uipath:uipath\/widget.sdk:1.2.3:*:*:*:*:node.js:*:*supported

Assessments

CVSS by origin

9.6
security-advisories@github.comCVSS 3.1 · role SecondaryCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
9.6
GitHub_MCVSS 3.1 · role unknownCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Limitations and unknowns

  • KEV membership is authoritative for the catalog, not proof of exposure in any environment.
  • EPSS is a dated model probability and not an individual-environment prediction.
  • Affected or fixed status applies only to the exact cited product and version scope; unresolved scope remains unknown.
  • NVD-carried upstream facts remain derivative and are not independent corroboration.
  • Only NVD metrics validated under the generation-bound calculator are Public Priority eligible; direct CVE record metrics remain display-only.
  • NVD CVSS source eligibility is closed: NVD-authored, exact record-source, or registered same-CVE container origin; unmapped sources remain display-only.
  • Factor D is unknown in Public Core because no accepted canonical mapping-obligation ledger is present.
  • Core replay supports the active and immediately prior generation; retrospective valid-at replay is deferred.