GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
6 advisories
Quasar Framework: Development TLS private keys are cached with overly permissive filesystem permissions
High
CVE-2026-106105
was published
for
@quasar/app-vite
(npm)
Oct 7, 2026
Quasar Framework: SSR/SSG dev error page discloses the full shell environment and its </script> escape is bypassable
High
CVE-2026-106106
was published
for
@quasar/app-vite
(npm)
Oct 7, 2026
Quasar Framework: App Vite SSR and SSG nonce attributes are not safely constrained
High
CVE-2026-106107
was published
for
@quasar/app-vite
(npm)
Oct 7, 2026
Quasar Framework: App Vite SSG page output paths can escape the configured distribution directory
Moderate
CVE-2026-106108
was published
for
@quasar/app-vite
(npm)
Oct 7, 2026
Quasar Framework: App Vite build cleanup can recursively remove unsafe configured output directories
Moderate
CVE-2026-106109
was published
for
@quasar/app-vite
(npm)
Oct 7, 2026
Quasar Framework: Super-linear regex backtracking on User-Agent lets one request stall a Quasar SSR server
High
CVE-2026-106104
was published
for
quasar
(npm)
Oct 7, 2026
ProTip!
Advisories are also available from the
GraphQL API