Skip to content
OpenAdvisories

Vendor

@quasar

7 known vulnerabilities.

Products

app-vite 5 QMarkdown 1 render-ssr-error 1 icongenie 1 cli 1 ssl-certificate 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.7
    CVE-2026-106108

    Quasar Framework: App Vite SSG page output paths can escape the configured distribution directory

    Quasar Framework is a framework for building high-performance Vue.js user interfaces. From 3.1.0 until 3.3.0, @quasar/app-vite SSG page definitions returned by getSsgPages() could supply dir and filename values that were joined to build.distDir without verify…

    quasarframework @quasar quasar app-vite npm
  • Medium 4.1
    CVE-2026-106109

    Quasar Framework: App Vite build cleanup can recursively remove unsafe configured output directories

    Quasar Framework is a framework for building high-performance Vue.js user interfaces. From 1.0.0 until 3.3.0, @quasar/app-vite recursively removed the resolved build.distDir before building without rejecting the project root, user home directory, filesystem r…

    quasarframework @quasar quasar app-vite npm
  • Medium 4.9
    CVE-2025-43954

    QMarkdown Cross-Site Scripting (XSS) vulnerability

    QMarkdown (aka quasar-ui-qmarkdown) before 2.0.5 allows XSS via headers even when when no-html is set.

    @quasar QMarkdown @quasar/quasar-ui-qmarkdown npm