Security Update: Cross-site scripting in TanStack Start

UpdateSep 30, 20263 days agoUnverifiedAdded Oct 2, 2026

The TanStack team has disclosed a critical cross-site scripting (XSS) vulnerability in TanStack Start. A crafted URL can cause an affected app to return attacker-controlled HTML from its own origin, which may run attacker-supplied JavaScript in a visitor's browser. Here's what Netlify customers need to know.

Topics: AI agents, Security

Netlify's release notes

More Netlify releases

Every Netlify release

Date	Release	Type
Sep 303 days ago	Security Update: Multiple vulnerabilities in Next.js unverified Update	Update
Sep 303 days ago	Trust Center is now in the Netlify Dashboard unverified Update	Update
Sep 294 days ago	Rich link previews for Agent Runners sites unverified Preview	Preview
Sep 294 days ago	GPT-6.1 Sol now available in AI Gateway and Agent Runners unverified Update	Update
Sep 285 days ago	Prompt and preview in one view with Agent Runners unverified Preview	Preview
Sep 285 days ago	Claude Sonnet 5.5 now available in AI Gateway and Agent Runners unverified Update	Update
Sep 249 days ago	New project activity feed unverified Preview	Preview
Sep 2211 days ago	Security Update: Critical Next.js vulnerability in ImageResponse unverified Update	Update

Also shipped on Sep 30, 2026

Netlify in September 2026

Date	Company	Release	Product	Type
Sep 303 days ago	New Relic	Place pipeline processors anywhere you need them with Pipeline Control unverified New RelicPreview	New Relic	Preview
Sep 303 days ago	New Relic	The updated version of Pathpoint is now available in Public Preview unverified New RelicPreview	New Relic	Preview
Sep 303 days ago	Astronomer	The new Astro experience is now live for all Organizations unverified AstronomerAstroPreview	Astro	Preview
Sep 303 days ago	Astronomer	The Astro IDE is generally available unverified AstronomerAstroGA	Astro	GA
Sep 303 days ago	Cloudflare	Containers - New scheduling policy for Containers to configure image and instance from Durable Objects unverified CloudflareCloudflare developer platformBeta	Cloudflare developer platform	Beta
Sep 303 days ago	Cloudflare	Containers - Snapshot and restore Container filesystem unverified CloudflareCloudflare developer platformBeta	Cloudflare developer platform	Beta

More Netlify releases

Also shipped on Sep 30, 2026

New releases by email