Skip to content
OpenAdvisories

Package · npm

quasar

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2026-106104

    Quasar Framework: Super-linear regex backtracking on User-Agent lets one request stall a Quasar SSR server

    Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.23.3, Platform.parseSSR() passed an unbounded User-Agent request header to getMatch() in ui/src/plugins/platform/Platform.js, whose browser-detection expressions …

    quasarframework quasar quasar npm