Qquasarframework

Products

Exploited and recent CVEs

• CVE-2026-106108 Medium 5.7 Quasar Framework: App Vite SSG page output paths can escape the configured distribution directory 0.1%
• CVE-2026-106109 Medium 4.1 Quasar Framework: App Vite build cleanup can recursively remove unsafe configured output directories 0.1%
• CVE-2026-106107 High 8.3 Quasar Framework: App Vite SSR and SSG nonce attributes are not safely constrained 0.3%
• CVE-2026-106106 High 7.1 Quasar Framework: SSR/SSG dev error page discloses the full shell environment and its </script> escape is bypassable 0.3%
• CVE-2026-106105 High 8.4 Quasar Framework: Development TLS private keys are cached with overly permissive filesystem permissions <0.1%
• CVE-2026-106104 High 8.7 Quasar Framework: Super-linear regex backtracking on User-Agent lets one request stall a Quasar SSR server 0.4%
• CVE-2026-106103 High 7.1 Quasar Framework: Path Traversal / Arbitrary File Write via crafted Icon Genie profile 0.3%
• CVE-2026-106102 Critical 10.0 Quasar Framework: Stored/Reflected XSS via unescaped SSR meta tag rendering in getHead() 0.3%
• CVE-2026-106101 Low 3.1 Quasar Framework: DOM Clobbering in Quasar openURL() SafariViewController Integration Causes Client-Side Denial of Service 0.3%
• CVE-2026-73647 Medium 5.6 Quasar Framework: Prototype pollution in Quasar extend() utility 0.4%