quasarframework vulnerabilities
10 published CVEs name quasarframework among the affected products.
- 10Published CVEs10 of them scored
- 10Last 12 monthspublished in the last year
- 1Critical5 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-106108
Quasar Framework: App Vite SSG page output paths can escape the configured distribution directory
quasarframework · quasar
Medium5.7 - CVE-2026-106109
Quasar Framework: App Vite build cleanup can recursively remove unsafe configured output directories
quasarframework · quasar
Medium4.1 - CVE-2026-106107
Quasar Framework: App Vite SSR and SSG nonce attributes are not safely constrained
quasarframework · quasar
High8.3 - CVE-2026-106106
Quasar Framework: SSR/SSG dev error page discloses the full shell environment and its </script> escape is bypassable
quasarframework · quasar
High7.1 - CVE-2026-106105
Quasar Framework: Development TLS private keys are cached with overly permissive filesystem permissions
quasarframework · quasar
High8.4 - CVE-2026-106104
Quasar Framework: Super-linear regex backtracking on User-Agent lets one request stall a Quasar SSR server
quasarframework · quasar
High8.7 - CVE-2026-106103
Quasar Framework: Path Traversal / Arbitrary File Write via crafted Icon Genie profile
quasarframework · quasar
High7.1 - CVE-2026-106102
Quasar Framework: Stored/Reflected XSS via unescaped SSR meta tag rendering in getHead()
quasarframework · quasar
Critical10.0 - CVE-2026-106101
Quasar Framework: DOM Clobbering in Quasar openURL() SafariViewController Integration Causes Client-Side Denial of Service
quasarframework · quasar
Low3.1 - CVE-2026-73647
Quasar Framework: Prototype pollution in Quasar extend() utility
quasarframework · quasar
Medium5.6