CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
TanStack npm Packages Supply Chain Compromise via GitHub Actions OIDC Exploitation (CVE-2026-45321)
[Affected Scope] 84 malicious versions across 42 @tanstack/* packages published between 19:20 and 19:26 UTC on 2026-05-11
[Impact] Attackers successfully published credential-stealing malware under trusted identities by hijacking legitimate OIDC tokens
[Mitigation] Immediately audit dependency trees, purge affected package versions, and rotate all potentially exposed credentials
ASUS Live Update Client Supply Chain Compromise and Malicious Code Insertion Vulnerability (CVE-2025-59374) Advisory
[Affected Scope] Specific versions of the ASUS Live Update client distributed prior to its End-of-Support (EOS) in October 2021
[Impact] Unauthorized modifications introduced via a supply chain compromise allow remote code execution and unintended malicious actions on targeted devices
[Mitigation] Since the product is End-of-Support, immediately uninstall the software and block update server communications at the network level