@builder.io/qwik-city vulnerabilities (npm)
8 vulnerabilities.
-
@builder.io/qwik-citynpm Qwik has array method pollution in FormData processing, allowing type confusion and DoS 7.5 High -
@builder.io/qwik-citynpm [qwik-city] CSRF protection middleware does not work properly for content type header with parameters (eg. multipart/form-data) 5.9 Medium -
@builder.io/qwik-citynpm Qwik City Open Redirect via fixTrailingSlash 2.7 Low -
@builder.io/qwik-citynpm Qwik City has a CSRF Protection Bypass via Content-Type Header Validation 5.9 Medium -
@builder.io/qwik-citynpm Prototype Pollution via FormData Processing in Qwik City 9.3 Critical -
@builder.io/qwik-citynpm Qwik SSR XSS via Unsafe Virtual Node Serialization 5.3 Medium -
@builder.io/qwik-citynpm Crashing any Qwik Server 9.2 Critical -
@builder.io/qwik-citynpm Cross-Site Request Forgery (CSRF) in builderio/qwik 4.7 Medium