Vulnerabilities

TI-2026-71841 CVE-2026-106108

Quasar App Vite SSG output paths can escape the distribution directory

LOW 25

Quasar Framework is a framework for building high-performance Vue.js user interfaces.

CVSS 4.0MEDIUM 5.7 Local No auth User interaction EPSS 0.00135 Published 2026-10-13 Fixed in 2.23.3, 3.3.0 CWE-22

TI-2026-68628 CVE-2026-106109 · GHSA-q9mq-245r-4g93

LOW 18

Quasar Framework is a framework for building high-performance Vue.js user interfaces.

CVSS 4.0MEDIUM 4.1 Local High privileges User interaction EPSS 0.00126 Published 2026-10-06 Fixed in 2.23.3, 3.3.0 CWE-22

TI-2026-68627 CVE-2026-106107 · GHSA-5m6h-8g35-p3m7

LOW 36

Quasar Framework is a framework for building high-performance Vue.js user interfaces.

CVSS 4.0HIGH 8.3 Network No auth No interaction EPSS 0.00266 Published 2026-10-06 Fixed in 2.23.4, 3.3.0 CWE-116

TI-2026-68626 CVE-2026-106106 · GHSA-r5mf-4r5x-q78f

MEDIUM 64

Quasar Framework is a framework for building high-performance Vue.js user interfaces.

CVSS 4.0HIGH 7.1 Adjacent network No auth User interaction EPSS 0.00276 Published 2026-10-06 Fixed in 2.23.3, 2.2.4 +1 CWE-497

TI-2026-68625 CVE-2026-106105 · GHSA-fh39-c73x-5pjv

LOW 37

Quasar Framework is a framework for building high-performance Vue.js user interfaces.

CVSS 4.0HIGH 8.4 Local Low privileges No interaction EPSS 0.00068 Published 2026-10-06 Fixed in 2.23.3, 3.3.0 +2 CWE-732

TI-2026-68623 CVE-2026-106103 · GHSA-wmpw-j6qv-mw88

LOW 31

Quasar Framework is a framework for building high-performance Vue.js user interfaces.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00285 Published 2026-10-06 Fixed in 2.22.0, 6.1.1 CWE-22

TI-2025-28518 CVE-2025-43954 · GHSA-wm65-ph3w-587c

LOW 27

QMarkdown (aka quasar-ui-qmarkdown) before 2.0.5 allows XSS via headers even when when no-html is set.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00214 Published 2025-04-20 Fixed in 2.0.5 CWE-79