TI-2026-68626 CVE-2026-106106 · GHSA-r5mf-4r5x-q78f
Quasar SSR dev error page leaks environment secrets and enables XSS
Priority MEDIUM 64
Quasar Framework is a framework for building high-performance Vue.js user interfaces.
@quasar
Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
@quasar records in CISA KEVNo @quasar vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
7 records
TI-2026-68625 CVE-2026-106105 · GHSA-fh39-c73x-5pjv
Quasar caches development TLS keys with lax file permissions
Priority LOW 37
Quasar Framework is a framework for building high-performance Vue.js user interfaces.
TI-2026-68627 CVE-2026-106107 · GHSA-5m6h-8g35-p3m7
Unsafe nonce interpolation in Quasar app-vite SSR and SSG output
Priority LOW 36
Quasar Framework is a framework for building high-performance Vue.js user interfaces.
TI-2026-68623 CVE-2026-106103 · GHSA-wmpw-j6qv-mw88
Path traversal in Quasar icongenie lets crafted profiles write files
Priority LOW 31
Quasar Framework is a framework for building high-performance Vue.js user interfaces.
TI-2025-28518 CVE-2025-43954 · GHSA-wm65-ph3w-587c
QMarkdown (aka quasar-ui-qmarkdown) before 2.0.5 allows XSS via headers even when when no-html is set.
Priority LOW 27
QMarkdown (aka quasar-ui-qmarkdown) before 2.0.5 allows XSS via headers even when when no-html is set.
Priority LOW 25
Quasar Framework is a framework for building high-performance Vue.js user interfaces.
TI-2026-68628 CVE-2026-106109 · GHSA-q9mq-245r-4g93
Recursive cleanup in Quasar app-vite deletes unsafe build directories
Priority LOW 18
Quasar Framework is a framework for building high-performance Vue.js user interfaces.