All issues

Search results

devtools-vite: source injection silently yields zero data-tsd-source attributes (AST child-key cache poisoned by regex literals)

Status: Open.

#523 In TanStack/devtools;

· nencodev opened on Sep 1, 2026

Render logger throws SecurityError on a cross-origin iframe, corrupting React's scheduler

Status: Open.

#522 In TanStack/devtools;

· meirelon opened on Aug 31, 2026

devtools-ui 0.7.0 breaks SSR boot with solid-js <=1.9.12: use is not exported by solid-js/web server build

Status: Open.

#511 In TanStack/devtools;

· tombeckenham opened on Aug 20, 2026

devtools-vite console pipe: infinite feedback loop with Vite 8 server.forwardConsole — one console entry floods browser + terminal

Status: Open.

#482 In TanStack/devtools;

· rshelnutt opened on Jul 8, 2026

Unauthenticated devtools event can trigger shell command injection during package install

Status: Open.

#464 In TanStack/devtools;

· Dremig opened on Jun 19, 2026

Click-to-source sends empty source= and hangs because setDisabledAfterClick(true) runs before reading highlightState.dataSource

Status: Open.

#451 In TanStack/devtools;

· samkuehn opened on May 25, 2026

Server log pipe drops printf-style format substitution, leaks raw %s into browser console

Status: Open.

#435 In TanStack/devtools;

· ImLunaHey opened on May 12, 2026

unexpected ci failures prior to supply chain attack

Status: Open.

#434 In TanStack/devtools;

· jonseymour opened on May 12, 2026

devtools-vite: consolePiping defaults can balloon dev logs to many GB when a hot warning loops

Status: Open.

#428 In TanStack/devtools;

· dsfaccini opened on May 7, 2026

createA11yPlugin Missing?

Status: Open.

#422 In TanStack/devtools;

· cgatian opened on Apr 9, 2026

Devtools shows duplicate

Status: Open.

#421 In TanStack/devtools;

· kk-analytics opened on Apr 8, 2026

Solid.js 'multiple instances' warnings appear in React apps with Vite 8

Status: Open.

#411 In TanStack/devtools;

· abed-daloopa opened on Apr 1, 2026