Skip to content
OpenAdvisories

Vendor

@builder.io

1 known vulnerabilities.

Products

qwik 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2026-84994

    Qwik: Crashing any Qwik Server via Resource thenable

    Qwik is a performance-focused JavaScript framework. Prior to @builder.io/qwik 1.20.0 and @qwik.dev/core 2.0.0-beta.37, default server-side qwik-json deserialization causes ResourceSerializer.$fill$ to pass resource._resolved to Promise.resolve without first r…

    QwikDev @builder.io qwik qwik npm