Skip to content
OpenAdvisories

Vendor

quasarframework

10 known vulnerabilities.

Products

quasar 10
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.7
    CVE-2026-106108

    Quasar Framework: App Vite SSG page output paths can escape the configured distribution directory

    Quasar Framework is a framework for building high-performance Vue.js user interfaces. From 3.1.0 until 3.3.0, @quasar/app-vite SSG page definitions returned by getSsgPages() could supply dir and filename values that were joined to build.distDir without verify…

    quasarframework @quasar quasar app-vite npm
  • Medium 4.1
    CVE-2026-106109

    Quasar Framework: App Vite build cleanup can recursively remove unsafe configured output directories

    Quasar Framework is a framework for building high-performance Vue.js user interfaces. From 1.0.0 until 3.3.0, @quasar/app-vite recursively removed the resolved build.distDir before building without rejecting the project root, user home directory, filesystem r…

    quasarframework @quasar quasar app-vite npm
  • Medium 5.6
    CVE-2026-73647

    Quasar Framework: Prototype pollution in Quasar extend() utility

    Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.22.0, the public extend() utility in ui/src/utils/extend/extend.js recursively copied attacker-controlled object keys during extend(true, target, source) deep mer…

    quasarframework quasar quasar npm