Skip to content
OpenAdvisories

Package · npm

@builder.io/qwik-city

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-32701

    Qwik has array method pollution in FormData processing, allowing type confusion and DoS

    Qwik is a performance-focused JavaScript framework. Versions prior to 1.19.2 improperly inferred arrays from dotted form field names during FormData parsing. By submitting mixed array-index and object-property keys for the same path, an attacker could cause u…

    QwikDev qwik @builder.io/qwik-city npm