quasarframework

Records10All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

quasarframework records in CISA KEV

No quasarframework vulnerabilities are listed in CISA KEV.

Records

10 records

TI-2026-68624 CVE-2026-106104 · GHSA-68jq-fhch-4xq4

Regex backtracking on User-Agent header stalls Quasar SSR servers

HIGH 79

Quasar Framework is a framework for building high-performance Vue.js user interfaces.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0037 Published 2026-10-06 Fixed in 2.23.3 CWE-1333

TI-2026-68626 CVE-2026-106106 · GHSA-r5mf-4r5x-q78f

Quasar SSR dev error page leaks environment secrets and enables XSS

MEDIUM 64

Quasar Framework is a framework for building high-performance Vue.js user interfaces.

CVSS 4.0HIGH 7.1 Adjacent network No auth User interaction EPSS 0.00276 Published 2026-10-06 Fixed in 2.23.3, 2.2.4 +1 CWE-497

TI-2026-51731 CVE-2026-73647 · GHSA-3r53-75j5-3g7j

Quasar Framework: Prototype pollution in Quasar extend() utility

MEDIUM 58

Quasar Framework is a framework for building high-performance Vue.js user interfaces.

CVSS 3.1MEDIUM 5.6 Network No auth No interaction EPSS 0.00387 Published 2026-08-13 Fixed in 2.22.0 CWE-1321

TI-2026-68622 CVE-2026-106102 · GHSA-pq96-jpmf-w254

Cross-site scripting in Quasar Framework SSR meta tags

MEDIUM 49

Quasar Framework is a framework for building high-performance Vue.js user interfaces.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00299 Published 2026-10-06 Fixed in 2.22.0 CWE-116

TI-2026-68621 CVE-2026-106101 · GHSA-89vp-x45c-52cq

Type confusion in quasarframework quasar

MEDIUM 48

Quasar Framework is a framework for building high-performance Vue.js user interfaces.

CVSS 3.1LOW 3.1 Network No auth User interaction EPSS 0.00256 Published 2026-10-06 Fixed in 2.32.2 CWE-843

TI-2026-68625 CVE-2026-106105 · GHSA-fh39-c73x-5pjv

Quasar caches development TLS keys with lax file permissions

LOW 37

Quasar Framework is a framework for building high-performance Vue.js user interfaces.

CVSS 4.0HIGH 8.4 Local Low privileges No interaction EPSS 0.00068 Published 2026-10-06 Fixed in 2.23.3, 3.3.0 +2 CWE-732

TI-2026-68627 CVE-2026-106107 · GHSA-5m6h-8g35-p3m7

Unsafe nonce interpolation in Quasar app-vite SSR and SSG output

LOW 36

Quasar Framework is a framework for building high-performance Vue.js user interfaces.

CVSS 4.0HIGH 8.3 Network No auth No interaction EPSS 0.00266 Published 2026-10-06 Fixed in 2.23.4, 3.3.0 CWE-116

TI-2026-68623 CVE-2026-106103 · GHSA-wmpw-j6qv-mw88

Path traversal in Quasar icongenie lets crafted profiles write files

LOW 31

Quasar Framework is a framework for building high-performance Vue.js user interfaces.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00285 Published 2026-10-06 Fixed in 2.22.0, 6.1.1 CWE-22

TI-2026-71841 CVE-2026-106108

Quasar App Vite SSG output paths can escape the distribution directory

LOW 25

Quasar Framework is a framework for building high-performance Vue.js user interfaces.

CVSS 4.0MEDIUM 5.7 Local No auth User interaction EPSS 0.00135 Published 2026-10-13 Fixed in 2.23.3, 3.3.0 CWE-22

TI-2026-68628 CVE-2026-106109 · GHSA-q9mq-245r-4g93

Recursive cleanup in Quasar app-vite deletes unsafe build directories

LOW 18

Quasar Framework is a framework for building high-performance Vue.js user interfaces.

CVSS 4.0MEDIUM 4.1 Local High privileges User interaction EPSS 0.00126 Published 2026-10-06 Fixed in 2.23.3, 3.3.0 CWE-22

Open these records in search →