Email security@tanstack.com to report a suspected vulnerability in tanstack.com privately. Please do not post security reports in public issues, pull requests, or discussions.

Include the affected URL or commit, steps to reproduce, and the potential impact. A small proof of concept is helpful when available.

For vulnerabilities in a TanStack library, check that library's repository for its security policy.