QW
Product
Qwik
by Qwik · last CVE Mar 20, 2026
11
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 3High 2Medium 6Low 0
Watch

Add Qwik to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-32701
7.5
0%
Mar 20
Qwik has array method pollution in FormData processing, allowing type confusion and DoS
Affected: before 1.19.2
CVE-2026-25155
7.1
0%
Feb 3
[qwik-city] CSRF protection middleware does not work properly for content type header with parameters (eg. multipart/form-data)
Affected: before 1.12.0
Showing 2