QU
Product
quasar
10
CVEs
0
On KEV
10.0
Max CVSS
9
New 30D
Severity mix
Critical 1High 5Medium 3Low 1
Watch
Add quasar to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-106104 | 8.7 | Oct 6 | Quasar Framework: Super-linear regex backtracking on User-Agent lets one request stall a Quasar SSR server Affected: < 2.23.3 |
| CVE-2026-106105 | 8.4 | Oct 6 | Quasar Framework: Development TLS private keys are cached with overly permissive filesystem permissions Affected: < 2.23.3 |
| CVE-2026-106107 | 8.3 | Oct 6 | Quasar Framework: App Vite SSR and SSG nonce attributes are not safely constrained Affected: < 2.23.4 |
| CVE-2026-106106 | 7.1 | Oct 6 | Quasar Framework: SSR/SSG dev error page discloses the full shell environment and its </script> escape is bypassable Affected: < 2.23.3 |
| CVE-2026-106103 | 7.1 | Oct 6 | Quasar Framework: Path Traversal / Arbitrary File Write via crafted Icon Genie profile Affected: < 2.22.0 |
Showing 5