Lucene search
+L

12 matches found

Github Security Blog
Github Security Blog
•added 2026/10/15 8:22 p.m.•4 views

Qwik: Crashing any Qwik Server via Resource thenable

Summary A Qwik server in the default configuration can be crashed with one unauthenticated HTTP request. During qwik-json body parsing, ResourceSerializer.$fill$ does Promise.resolveresource.resolved. If resolved is a plain object whose .then is a QRL for an unregistered symbol, the async QRL...

8.7CVSS5.8AI score0.00524EPSS
SaveExploits0References6Affected Software2
Rows per page
Query Builder