corpus.blog
43,567 blogs · 5,563,491 posts Claim your blog
Record · corpus.blog/posts/01a0fab3-de57-73aa-a17c-4a89c12130aa

Cache Poisoning Through pull_request_target: The TanStack Incident

safedep.io · published 13 May 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at safedep.io Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
External links
17
Words captured
1,487

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://github.com/TanStack/router/pull/7378
github.com
https://github.com/zblgg
github.com
https://github.com/TanStack/router/actions/runs/25613093674/job/75429692202
github.com
https://github.com/zblgg/configuration/commit/8542572e1a36
github.com
https://github.com/TanStack/router/blob/d296252f7324/.github/workflows/bundle-size.yml
github.com
https://github.com/TanStack/config/blob/d8cef73c4209/.github/setup/action.yml
github.com
https://github.com/TanStack/router/blob/d296252f7324/.github/workflows/release.yml
github.com
https://api.github.com/repos/zblgg/configuration
api.github.com
https://api.github.com/repos/zblgg/configuration/events
api.github.com
https://api.github.com/repos/TanStack/router/actions/runs?actor=zblgg
api.github.com
https://github.com/TanStack/router/commit/5d92d5aea302
github.com
https://github.com/TanStack/router/commit/3ee179f0d997
github.com
https://github.com/TanStack/config/commit/d5a7dccc53c5
github.com
https://github.com/TanStack/config/commit/47d572f3bc5e
github.com
https://docs.github.com/en/actions/security-for-github-actions/security-guides/security-hardening-for-github-actions
docs.github.com
https://securitylab.github.com/resources/github-actions-preventing-pwn-requests/
securitylab.github.com
https://x.com/adnanthekhan/status/2053950558705258691
x.com