Skip to content
OpenAdvisories

Vendor

BuilderIO

6 known vulnerabilities.

Products

builderio/qwik 3 @builder.io/sdk-react 2 @builder.io/sdk-vue 2 @builder.io/sdk-svelte 2 @builder.io/sdk-solid 2 @builder.io/sdk-qwik 2 @builder.io/sdk-angular 2 @builder.io/sdk-react-nextjs 2 gpt-crawler 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.6
    CVE-2026-92779

    Builder.io Gen2 SDKs through 5.2.11 Prototype Pollution via Bindings

    Builder.io Gen2 SDKs through versions 5.2.11 and 0.25.13 contain a prototype pollution vulnerability in the deep-set helper function that processes content block bindings without validation. Attackers can craft content blocks with binding keys containing __pr…

    BuilderIO @builder.io/sdk-qwik @builder.io/sdk-react-nextjs @builder.io/sdk-vue
  • High 8.6
    CVE-2026-82286 Public exploit

    gpt-crawler Arbitrary File Write via outputFileName Parameter

    gpt-crawler through 1.5.1 fails to validate the outputFileName parameter in the POST /crawl endpoint, allowing unauthenticated attackers to write arbitrary files to any filesystem path. Attackers can supply absolute paths or parent-directory segments to overw…

    BuilderIO gpt-crawler