Skip to content
OpenAdvisories

Package · npm

@builder.io/qwik

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2024-41677

    Cross-site Scripting (XSS) vulnerability due to improper HTML escaping in qwik

    Qwik is a performance focused javascript framework. A potential mutation XSS vulnerability exists in Qwik for versions up to but not including 1.6.0. Qwik improperly escapes HTML on server-side rendering. It converts strings according to the rules found in th…

    QwikDev qwik @builder.io/qwik npm
  • Medium 6.1
    CVE-2023-0410

    Cross-site Scripting (XSS) - Generic in builderio/qwik

    Cross-site Scripting (XSS) - Generic in GitHub repository builderio/qwik prior to 0.1.0-beta5.

    BuilderIO builderio/qwik @builder.io/qwik npm