Skip to content
OpenAdvisories

Package · npm

quasar

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2026-106102

    Quasar Framework: Stored/Reflected XSS via unescaped SSR meta tag rendering in getHead()

    Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.22.0, the SSR-only getHead() serializer in ui/src/plugins/meta/Meta.js used getAttr() to interpolate values supplied through useMeta() into title, meta, link, and…

    quasarframework quasar quasar npm