Search results

Unauthenticated devtools event can trigger shell command injection during package install

Status: Open.

#464 In TanStack/devtools;

· Dremig opened on Jun 19, 2026

Devtools vite plugin causes bug.

Status: Open.

#457 In TanStack/devtools;

· Stybo opened on Jun 8, 2026

Click-to-source sends empty source= and hangs because setDisabledAfterClick(true) runs before reading highlightState.dataSource

Status: Open.

#451 In TanStack/devtools;

· samkuehn opened on May 25, 2026

Server log pipe drops printf-style format substitution, leaks raw %s into browser console

Status: Open.

#435 In TanStack/devtools;

· ImLunaHey opened on May 12, 2026

unexpected ci failures prior to supply chain attack

Status: Open.

#434 In TanStack/devtools;

· jonseymour opened on May 12, 2026

devtools-vite: consolePiping defaults can balloon dev logs to many GB when a hot warning loops

Status: Open.

#428 In TanStack/devtools;

· dsfaccini opened on May 7, 2026

createA11yPlugin Missing?

Status: Open.

#422 In TanStack/devtools;

· cgatian opened on Apr 9, 2026

Devtools shows duplicate

Status: Open.

#421 In TanStack/devtools;

· kk-analytics opened on Apr 8, 2026

Solid.js 'multiple instances' warnings appear in React apps with Vite 8

Status: Open.

#411 In TanStack/devtools;

· abed-daloopa opened on Apr 1, 2026

bump solid-js to avoid security vulnerability

Status: Open.

#410 In TanStack/devtools;

· enrique-ramirez opened on Apr 1, 2026

data-tsd-source inject-source plugin causes hydration mismatch in SSR (TanStack Start)

Status: Open.

#405 In TanStack/devtools;

· twentynineteen opened on Mar 26, 2026

starter template messing up with devtools readability

Status: Open.

#401 In TanStack/devtools;

· uncomplexity opened on Mar 23, 2026