{
  "id": "CVE-2026-45321",
  "vendor_project": "TanStack",
  "product": "TanStack",
  "description": "TanStack contains an unspecified vulnerability that allowed malicious versions of the product to be published to the npm registry to publish credential-stealing malware under a trusted identity.",
  "kev_date_added": "2026-05-27",
  "cvss": 9.0,
  "severity": "High",
  "advisories": [],
  "cited_in_cases": [],
  "indictment_cited": false
}