Post
🚨 Security notice for full-stack React teams: TanStack Start patched CVE-2026-102989, a reflected XSS vulnerability discovered in route parameter handling. Update your npm packages right away to protect active production apps.
0 reposts0 likes
Catch up on every release note, architectural analysis, and patch guide in the full dispatch: react-weekly.dev/newsletter/41
react-weekly.devNext.js 16.4, TanStack Charts 1.0, and Compiler Benchmarks - React Weekly #41Next.js 16.4 brings Turbopack refinements, TanStack launches Charts 1.0 and fixes a critical Start CVE, and React Native Skia introduces Graphite.