Skip to content
OpenAdvisories

Vendor

QwikDev

10 known vulnerabilities.

Products

qwik 10
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.7
    CVE-2026-84994

    Qwik: Crashing any Qwik Server via Resource thenable

    Qwik is a performance-focused JavaScript framework. Prior to @builder.io/qwik 1.20.0 and @qwik.dev/core 2.0.0-beta.37, default server-side qwik-json deserialization causes ResourceSerializer.$fill$ to pass resource._resolved to Promise.resolve without first r…

    QwikDev @builder.io qwik qwik npm
  • High 7.5
    CVE-2026-32701

    Qwik has array method pollution in FormData processing, allowing type confusion and DoS

    Qwik is a performance-focused JavaScript framework. Versions prior to 1.19.2 improperly inferred arrays from dotted form field names during FormData parsing. By submitting mixed array-index and object-property keys for the same path, an attacker could cause u…

    QwikDev qwik @builder.io/qwik-city npm