Vulnerabilities

TI-2026-71841 CVE-2026-106108

Quasar App Vite SSG output paths can escape the distribution directory

LOW 25

Quasar Framework is a framework for building high-performance Vue.js user interfaces.

CVSS 4.0MEDIUM 5.7 Local No auth User interaction EPSS 0.00135 Published 2026-10-13 Fixed in 2.23.3, 3.3.0 CWE-22

TI-2026-68628 CVE-2026-106109 · GHSA-q9mq-245r-4g93

Recursive cleanup in Quasar app-vite deletes unsafe build directories

LOW 18

Quasar Framework is a framework for building high-performance Vue.js user interfaces.

CVSS 4.0MEDIUM 4.1 Local High privileges User interaction EPSS 0.00126 Published 2026-10-06 Fixed in 2.23.3, 3.3.0 CWE-22

TI-2026-68627 CVE-2026-106107 · GHSA-5m6h-8g35-p3m7

Unsafe nonce interpolation in Quasar app-vite SSR and SSG output

LOW 36

Quasar Framework is a framework for building high-performance Vue.js user interfaces.

CVSS 4.0HIGH 8.3 Network No auth No interaction EPSS 0.00266 Published 2026-10-06 Fixed in 2.23.4, 3.3.0 CWE-116

TI-2026-68626 CVE-2026-106106 · GHSA-r5mf-4r5x-q78f

Quasar SSR dev error page leaks environment secrets and enables XSS

MEDIUM 64

Quasar Framework is a framework for building high-performance Vue.js user interfaces.

CVSS 4.0HIGH 7.1 Adjacent network No auth User interaction EPSS 0.00276 Published 2026-10-06 Fixed in 2.23.3, 2.2.4 +1 CWE-497

TI-2026-68625 CVE-2026-106105 · GHSA-fh39-c73x-5pjv

Quasar caches development TLS keys with lax file permissions

LOW 37

Quasar Framework is a framework for building high-performance Vue.js user interfaces.

CVSS 4.0HIGH 8.4 Local Low privileges No interaction EPSS 0.00068 Published 2026-10-06 Fixed in 2.23.3, 3.3.0 +2 CWE-732

TI-2026-68624 CVE-2026-106104 · GHSA-68jq-fhch-4xq4

Regex backtracking on User-Agent header stalls Quasar SSR servers

HIGH 79

Quasar Framework is a framework for building high-performance Vue.js user interfaces.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0037 Published 2026-10-06 Fixed in 2.23.3 CWE-1333

TI-2026-68623 CVE-2026-106103 · GHSA-wmpw-j6qv-mw88

Path traversal in Quasar icongenie lets crafted profiles write files

LOW 31

Quasar Framework is a framework for building high-performance Vue.js user interfaces.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00285 Published 2026-10-06 Fixed in 2.22.0, 6.1.1 CWE-22

TI-2026-68622 CVE-2026-106102 · GHSA-pq96-jpmf-w254

Cross-site scripting in Quasar Framework SSR meta tags

MEDIUM 49

Quasar Framework is a framework for building high-performance Vue.js user interfaces.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00299 Published 2026-10-06 Fixed in 2.22.0 CWE-116

TI-2026-68621 CVE-2026-106101 · GHSA-89vp-x45c-52cq

Type confusion in quasarframework quasar

MEDIUM 48

Quasar Framework is a framework for building high-performance Vue.js user interfaces.

CVSS 3.1LOW 3.1 Network No auth User interaction EPSS 0.00256 Published 2026-10-06 Fixed in 2.32.2 CWE-843

TI-2026-51731 CVE-2026-73647 · GHSA-3r53-75j5-3g7j

Quasar Framework: Prototype pollution in Quasar extend() utility

MEDIUM 58

Quasar Framework is a framework for building high-performance Vue.js user interfaces.

CVSS 3.1MEDIUM 5.6 Network No auth No interaction EPSS 0.00387 Published 2026-08-13 Fixed in 2.22.0 CWE-1321

Vulnerabilities

Filters