QwikDev qwik vulnerabilities
10 published CVEs name QwikDev qwik among the affected products.
- 10Published CVEs10 of them scored
- 8Last 12 monthspublished in the last year
- 3Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-84994
Qwik: Crashing any Qwik Server via Resource thenable
QwikDev · qwik
High8.7 - CVE-2026-32701
Qwik has array method pollution in FormData processing, allowing type confusion and DoS
QwikDev · qwik
High7.5 - CVE-2026-27971
Qwik affected by unauthenticated RCE via server$ Deserialization
QwikDev · qwik
Critical9.2 - CVE-2026-25150
Prototype Pollution via FormData Processing in Qwik City
QwikDev · qwik
Critical9.3 - CVE-2026-25148
Qwik SSR XSS via Unsafe Virtual Node Serialization
QwikDev · qwik
Medium5.3 - CVE-2026-25151
Qwik City has a CSRF Protection Bypass via Content-Type Header Validation
QwikDev · qwik
Medium5.9 - CVE-2026-25155
[qwik-city] CSRF protection middleware does not work properly for content type header with parameters (eg. multipart/form-data)
QwikDev · qwik
Medium5.9 - CVE-2026-25149
Qwik City Open Redirect via fixTrailingSlash
QwikDev · qwik
Low2.7 - CVE-2025-53620
Crashing any Qwik Server
QwikDev · qwik
Critical9.2 - CVE-2024-41677
Cross-site Scripting (XSS) vulnerability due to improper HTML escaping in qwik
QwikDev · qwik
Medium6.3