Quasar vulnerabilities
We track 4 vulnerabilities in Quasar products across 5 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on October 6, 2026.
Latest Quasar vulnerabilities
- 8.3 High severity
quasar: Improper Neutralization of Input During Web Page Generation
Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 3.3.0, several @quasar/app-vite SSR and SSG rendering paths interpolated ssrContext.nonce directly into quoted HTML attributes. An application that derives or overri
- 7.1 High severity
quasar: Improper Neutralization of Input During Web Page Generation
Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to @quasar/render-ssr-error 2.2.4 and @quasar/app-vite 3.3.0, renderSSRError() in utils/render-ssr-error/src/index.js used diagnostic data from utils/render-ssr-error/s
- 8.4 High severity
quasar: Incorrect Permission Assignment for Critical Resource
Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to @quasar/ssl-certificate 2.1.0, @quasar/cli 5.0.4, and @quasar/app-vite 3.3.0, the @quasar/ssl-certificate utility cached a combined private key and certificate PEM w
- 7.1 High severity
quasar: Improper Limitation of a Pathname to a Restricted Directory
Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to @quasar/icongenie 6.1.1, the icongenie generate --profile command accepted folder and name values from a user-supplied profile without constraining the resolved dest