@quasar

Products

Exploited and recent CVEs

• CVE-2026-106108 Medium 5.7 Quasar Framework: App Vite SSG page output paths can escape the configured distribution directory 0.1%
• CVE-2026-106109 Medium 4.1 Quasar Framework: App Vite build cleanup can recursively remove unsafe configured output directories 0.1%
• CVE-2026-106107 High 8.3 Quasar Framework: App Vite SSR and SSG nonce attributes are not safely constrained 0.3%
• CVE-2026-106106 High 7.1 Quasar Framework: SSR/SSG dev error page discloses the full shell environment and its </script> escape is bypassable 0.3%
• CVE-2026-106106 High 7.1 Quasar Framework: SSR/SSG dev error page discloses the full shell environment and its </script> escape is bypassable 0.3%
• CVE-2026-106105 High 8.4 Quasar Framework: Development TLS private keys are cached with overly permissive filesystem permissions <0.1%
• CVE-2026-106105 High 8.4 Quasar Framework: Development TLS private keys are cached with overly permissive filesystem permissions <0.1%
• CVE-2026-106105 High 8.4 Quasar Framework: Development TLS private keys are cached with overly permissive filesystem permissions <0.1%
• CVE-2026-106103 High 7.1 Quasar Framework: Path Traversal / Arbitrary File Write via crafted Icon Genie profile 0.3%
• CVE-2025-43954 Medium 4.9 QMarkdown (aka quasar-ui-qmarkdown) before 2.0.5 allows XSS via headers even when when no-html is set. 0.2%