Skip to content
OpenAdvisories

Package · npm

quasar

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.6
    CVE-2026-73647

    Quasar Framework: Prototype pollution in Quasar extend() utility

    Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.22.0, the public extend() utility in ui/src/utils/extend/extend.js recursively copied attacker-controlled object keys during extend(true, target, source) deep mer…

    quasarframework quasar quasar npm