Skip to content
OpenAdvisories

Product · @quasar

render-ssr-error

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.1

    Quasar Framework: SSR/SSG dev error page discloses the full shell environment and its </script> escape is bypassable

    Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to @quasar/render-ssr-error 2.2.4 and @quasar/app-vite 3.3.0, renderSSRError() in utils/render-ssr-error/src/index.js used diagnostic data from utils/render-ssr-error/…