Skip to content
Citadel Cyber
Tools
Back to site
Blog
Security briefs.
Oct 18, 2026
· CVE-2026-102989
Exported or self-hosted your Lovable app? How to patch the TanStack Start flaw
A critical reflected XSS in TanStack Start server functions: affected versions, the fix, and why you have to redeploy.