Vulnerabilities in quasarframework
10 resultsCVE-2026-73647MEDIUMQuasar Framework: Prototype pollution in Quasar extend() utilityEPSS 0.4%CVE-2026-106104HIGHQuasar Framework: Super-linear regex backtracking on User-Agent lets one request stall a Quasar SSR serverEPSS 0.4%CVE-2026-106102CRITICALQuasar Framework: Stored/Reflected XSS via unescaped SSR meta tag rendering in getHead()EPSS 0.3%CVE-2026-106103HIGHQuasar Framework: Path Traversal / Arbitrary File Write via crafted Icon Genie profileEPSS 0.3%CVE-2026-106106HIGHQuasar Framework: SSR/SSG dev error page discloses the full shell environment and its </script> escape is bypassableEPSS 0.3%CVE-2026-106107HIGHQuasar Framework: App Vite SSR and SSG nonce attributes are not safely constrainedEPSS 0.3%CVE-2026-106101LOWQuasar Framework: DOM Clobbering in Quasar openURL() SafariViewController Integration Causes Client-Side Denial of ServiceEPSS 0.3%CVE-2026-106108MEDIUMQuasar Framework: App Vite SSG page output paths can escape the configured distribution directoryEPSS 0.1%CVE-2026-106109MEDIUMQuasar Framework: App Vite build cleanup can recursively remove unsafe configured output directoriesEPSS 0.1%CVE-2026-106105HIGHQuasar Framework: Development TLS private keys are cached with overly permissive filesystem permissionsEPSS 0.1%