What’s Vulnerable › Products

@quasar app-vite vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your @quasar app-vite version is affected

Latest @quasar app-vite vulnerabilities

• CVE-2026-106108 — Quasar Framework: App Vite SSG page output paths can escape the configured distribution directory (CVSS 5.7)
• CVE-2026-106109 — Quasar Framework: App Vite build cleanup can recursively remove unsafe configured output directories (CVSS 4.1)
• CVE-2026-106107 — Quasar Framework: App Vite SSR and SSG nonce attributes are not safely constrained (CVSS 8.3)
• CVE-2026-106106 — Quasar Framework: SSR/SSG dev error page discloses the full shell environment and its </script> escape is bypassable (CVSS 7.1)
• CVE-2026-106105 — Quasar Framework: Development TLS private keys are cached with overly permissive filesystem permissions (CVSS 8.4)