Vendor

BuilderIO

6 known vulnerabilities.

Products

builderio/qwik 3 @builder.io/sdk-react 2 @builder.io/sdk-vue 2 @builder.io/sdk-svelte 2 @builder.io/sdk-solid 2 @builder.io/sdk-qwik 2 @builder.io/sdk-angular 2 @builder.io/sdk-react-nextjs 2 gpt-crawler 1

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

Medium 6.3

CVE-2026-92781

Builder.io Gen2 SDKs through 5.2.11 Prototype Pollution via builder.userAttributes

Builder.io Gen2 SDKs through versions 5.2.11 and 0.25.13 contain a prototype pollution vulnerability in the unflatten helper that processes builder.userAttributes query parameters without prototype guards. Attackers can craft preview links with __proto__ or p…

BuilderIO @builder.io/sdk-react-nextjs @builder.io/sdk-vue @builder.io/sdk-solid

Sep 16, 2026
Medium 4.7

CVE-2023-2307

Cross-Site Request Forgery (CSRF) in builderio/qwik

Cross-Site Request Forgery (CSRF) in GitHub repository builderio/qwik prior to 0.104.0.

BuilderIO builderio/qwik @builder.io/qwik-city npm

Apr 26, 2023
Medium 6.1

CVE-2023-0410

Cross-site Scripting (XSS) - Generic in builderio/qwik

Cross-site Scripting (XSS) - Generic in GitHub repository builderio/qwik prior to 0.1.0-beta5.

BuilderIO builderio/qwik @builder.io/qwik npm

Jan 20, 2023