CyberSecBulletin

@builder.io vulnerabilities

We track 1 vulnerability in @builder.io products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 13, 2026.

1vulnerabilities
0critical
1high
0exploited
8.7average CVSS score

Latest @builder.io vulnerabilities

  • 8.7 High severity

    qwik: Uncaught Exception

    CVE-2026-84994QwikDev

    Qwik is a performance-focused JavaScript framework. Prior to @builder.io/qwik 1.20.0 and @qwik.dev/core 2.0.0-beta.37, default server-side qwik-json deserialization causes ResourceSerializer.$fill$ to pass resource._resolved to Promise.resolve without first re