EUVD-2026-93570

Quasar Framework: Development TLS private keys are cached with overly permissive filesystem permissions...

CVE-2026-106105

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to @quasar/ssl-certificate 2.1.0, @quasar/cli 5.0.4, and @quasar/app-vite 3.3.0, the @quasar/ssl-certificate utility cached a combined private key and certificate PEM without explicitly applying owner-only...

@docsector/docsector-reader (>=0.1.0, <=4.29.2), @gyptio/cli (>=0.0.1, <=0.0.8) +5 more potentially affected by CVE-2026-106105 via @quasar/cli (>=1.4.0, <=2.5.0)

@quasar/cli NPM version =1.4.0, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =1.0.0, =1.0.14, =2.1.19 Source cves: CVE-2026-106105 Source advisory: MEND:CVE-2026-106105...

CVE-2026-106105

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to @quasar/ssl-certificate 2.1.0, @quasar/cli 5.0.4, and @quasar/app-vite 3.3.0, the @quasar/ssl-certificate utility cached a combined private key and certificate PEM without explicitly applying owner-only...

PT-2026-106823

Name of the Vulnerable Software and Affected Versions @quasar/ssl-certificate versions prior to 2.1.0 @quasar/cli versions prior to 5.0.4 @quasar/app-vite versions prior to 3.3.0 Description The @quasar/ssl-certificate utility caches a combined private key and certificate PEM without applying...