What’s Vulnerable › Products

quasarframework quasar vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.

Check whether your quasarframework quasar version is affected

Latest quasarframework quasar vulnerabilities

• CVE-2026-106108 — Quasar Framework: App Vite SSG page output paths can escape the configured distribution directory (CVSS 5.7)
• CVE-2026-106109 — Quasar Framework: App Vite build cleanup can recursively remove unsafe configured output directories (CVSS 4.1)
• CVE-2026-106107 — Quasar Framework: App Vite SSR and SSG nonce attributes are not safely constrained (CVSS 8.3)
• CVE-2026-106106 — Quasar Framework: SSR/SSG dev error page discloses the full shell environment and its </script> escape is bypassable (CVSS 7.1)
• CVE-2026-106105 — Quasar Framework: Development TLS private keys are cached with overly permissive filesystem permissions (CVSS 8.4)
• CVE-2026-106104 — Quasar Framework: Super-linear regex backtracking on User-Agent lets one request stall a Quasar SSR server (CVSS 8.7)
• CVE-2026-106103 — Quasar Framework: Path Traversal / Arbitrary File Write via crafted Icon Genie profile (CVSS 7.1)
• CVE-2026-106102 — Quasar Framework: Stored/Reflected XSS via unescaped SSR meta tag rendering in getHead() (CVSS 10.0)
• CVE-2026-106101 — Quasar Framework: DOM Clobbering in Quasar openURL() SafariViewController Integration Causes Client-Side Denial of Service (CVSS 3.1)
• CVE-2026-73647 — Quasar Framework: Prototype pollution in Quasar extend() utility (CVSS 5.6)