AP
Product
app-vite
5
CVEs
0
On KEV
8.4
Max CVSS
5
New 30D
Severity mix
Critical 0High 3Medium 2Low 0
Watch
Add app-vite to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-106105 | 8.4 | Oct 6 | Quasar Framework: Development TLS private keys are cached with overly permissive filesystem permissions Affected: < 3.3.0 |
| CVE-2026-106107 | 8.3 | Oct 6 | Quasar Framework: App Vite SSR and SSG nonce attributes are not safely constrained Affected: < 3.3.0 |
| CVE-2026-106106 | 7.1 | Oct 6 | Quasar Framework: SSR/SSG dev error page discloses the full shell environment and its </script> escape is bypassable Affected: < 3.3.0 |
Showing 3