Skip to content
@quasar vulnerabilities
Newest
-
@quasar app-vite, quasarframework quasar +1 more
Quasar Framework: App Vite SSG page output paths can escape the configured distribution directory
CVE-2026-106108
Fix available
5.7 Medium
-
@quasar app-vite, quasarframework quasar +1 more
Quasar Framework: App Vite build cleanup can recursively remove unsafe configured output directories
CVE-2026-106109
Fix available
4.1 Medium
-
@quasar app-vite, quasarframework quasar +1 more
Quasar Framework: App Vite SSR and SSG nonce attributes are not safely constrained
CVE-2026-106107
Fix available
8.3 High
-
@quasar app-vite, render-ssr-error, quasarframework quasar +2 more
Quasar Framework: SSR/SSG dev error page discloses the full shell environment and its </script> escape is bypassable
CVE-2026-106106
Fix available
7.1 High
-
@quasar app-vite, cli, ssl-certificate +1 more +3 more
Quasar Framework: Development TLS private keys are cached with overly permissive filesystem permissions
CVE-2026-106105
Fix available
8.4 High
-
@quasar icongenie, quasarframework quasar +1 more
Quasar Framework: Path Traversal / Arbitrary File Write via crafted Icon Genie profile
CVE-2026-106103
Fix available
7.1 High