Log in Start free

QwikDev

Products

ProductCVEsExploitedLatest
qwik10–Oct 13, 2026

Exploited and recent CVEs

  • CVE-2026-84994 High 8.7 Qwik: Crashing any Qwik Server via Resource thenable 0.5%
  • CVE-2026-32701 High 7.5 Qwik has array method pollution in FormData processing, allowing type confusion and DoS 0.5%
  • CVE-2026-27971 Critical 9.2 Qwik affected by unauthenticated RCE via server$ Deserialization 5.5%
  • CVE-2026-25150 Critical 9.3 Prototype Pollution via FormData Processing in Qwik City 0.7%
  • CVE-2026-25148 Medium 5.3 Qwik SSR XSS via Unsafe Virtual Node Serialization 0.3%
  • CVE-2026-25151 Medium 5.9 Qwik City has a CSRF Protection Bypass via Content-Type Header Validation 0.2%
  • CVE-2026-25155 Medium 5.9 [qwik-city] CSRF protection middleware does not work properly for content type header with parameters (eg. multipart/form-data) 0.1%
  • CVE-2026-25149 Low 2.7 Qwik City Open Redirect via fixTrailingSlash 0.3%
  • CVE-2025-53620 Critical 9.2 Crashing any Qwik Server 0.4%
  • CVE-2024-41677 Medium 6.3 Cross-site Scripting (XSS) vulnerability due to improper HTML escaping in qwik 0.5%