Vulnerabilities in @quasar
5 resultsCVE-2026-106103HIGHQuasar Framework: Path Traversal / Arbitrary File Write via crafted Icon Genie profileEPSS 0.3%CVE-2026-106106HIGHQuasar Framework: SSR/SSG dev error page discloses the full shell environment and its </script> escape is bypassableEPSS 0.3%CVE-2026-106107HIGHQuasar Framework: App Vite SSR and SSG nonce attributes are not safely constrainedEPSS 0.3%CVE-2026-106109MEDIUMQuasar Framework: App Vite build cleanup can recursively remove unsafe configured output directoriesEPSS 0.1%CVE-2026-106105HIGHQuasar Framework: Development TLS private keys are cached with overly permissive filesystem permissionsEPSS 0.1%