Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

11 records

Vendor: QwikDev Component: Qwik Clear all filters
TI-2026-20317 CVE-2026-25155 · GHSA-vm6g-8r4h-22x8

Cross-site request forgery in QwikDev qwik

Priority LOW 30

Qwik is a performance focused javascript framework.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00147 Published 2026-02-03 Fixed in 1.12.0 CWE-352
TI-2023-02164 CVE-2023-2307 · GHSA-c54w-7j5f-xg98

Cross-Site Request Forgery (CSRF) in builderio/qwik

Priority MEDIUM 62

Cross-Site Request Forgery (CSRF) in GitHub repository builderio/qwik prior to 0.104.0.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00269 Published 2023-04-26 Fixed in 0.104.0 CWE-352
TI-2023-01211 CVE-2023-1283 · GHSA-9wf9-qvvp-2929

Code Injection in builderio/qwik

Priority HIGH 82

Code Injection in GitHub repository builderio/qwik prior to 0.21.0.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01149 Published 2023-03-08 Fixed in 0.21.0 CWE-94
TI-2023-00388 CVE-2023-0410 · GHSA-hm7f-rq7q-j9xp

Cross-site Scripting (XSS) - Generic in builderio/qwik

Priority MEDIUM 60

Cross-site Scripting (XSS) - Generic in GitHub repository builderio/qwik prior to 0.1.0-beta5.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00479 Published 2023-01-20 Fixed in 0.1.0-beta5, 0.16.2 CWE-79