Skip to content
OpenAdvisories

Package · npm

@qwik.dev/core

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.7
    CVE-2026-84994

    Qwik: Crashing any Qwik Server via Resource thenable

    Qwik is a performance-focused JavaScript framework. Prior to @builder.io/qwik 1.20.0 and @qwik.dev/core 2.0.0-beta.37, default server-side qwik-json deserialization causes ResourceSerializer.$fill$ to pass resource._resolved to Promise.resolve without first r…

    QwikDev @builder.io qwik qwik npm