Description
CVE-2026-26903 PoC Denial-of-service via unbounded recursion in TanStack Query's replaceEqualDeep function A single crafted query update with deeply nested objects can freeze the JavaScript thread indefinitely, causing complete application...
Basic Information
ID
622FE954-B229-5DE1-B058-7F59DD5B727C
Published
Apr 22, 2026 at 00:28
Modified
Apr 22, 2026 at 00:52