PT-2026-6277

Name of the Vulnerable Software and Affected Versions Qwik versions prior to 1.12.0 Description Qwik is a javascript framework. A regular expression typo within the isContentType function causes incorrect parsing of certain Content-Type headers. Recommendations Update to version 1.12.0 or later...

Qwik 跨站请求伪造漏洞

Qwik is a micro-web framework developed by Qwik Dev. Versions of Qwik prior to 1.12.0 contained a cross-site request forgeing vulnerability. This vulnerability stemmed from spelling errors in regular expressions, resulting in incorrect parsing of certain Content-Type headers...

Qwik 安全漏洞

Qwik is a micro-web framework developed by Qwik Dev. Versions of Qwik prior to 1.19.0 contained security vulnerabilities. These vulnerabilities stemmed from a prototype pollution vulnerability in the formToObj function, which could allow unauthenticated attackers to contaminate Object.prototype,...

The vulnerability of the Qwik framework for creating high-performance web applications, related to a exception handling error that allows a hacker to cause a service failure.

The vulnerability of the Qwik framework for creating high-performance web applications is related to an exception handling error. Exploiting this vulnerability could allow a malicious actor to cause service failures...

EUVD-2024-2469

Malicious code in bioql PyPI...

Qwik 安全漏洞

Qwik is a micro web framework open-sourced by Qwik Dev. A security vulnerability exists in Qwik versions prior to 1.13.0, which stems from an unhandled invalid qfunc error that could cause the service to crash...

CVE-2024-41677

Summary: CVE-2024-41677 describes a mutation XSS (mXSS) vulnerability in Qwik due to improper HTML escaping during server-side rendering. The issue arises from how strings are escaped in render-ssr.ts, causing the final browser DOM to differ from the server render. Affected versions: up to, but n...

qwik 跨站请求伪造漏洞

qwik is a micro web framework. A cross-site request forgery vulnerability exists in qwik versions prior to 0.104.0. An attacker could exploit this vulnerability to perform a cross-site request forgery attack...

@leifermendez/partytown-qwik (>=1.0.3, <=1.0.7), storybook-framework-qwik (0.0.1) potentially affected by CVE-2023-0410 via @builder.io/qwik (>=0.9.0, <=0.15.2)

@builder.io/qwik NPM version =0.9.0, =1.0.3, =1.0.7 - storybook-framework-qwik 0.0.1 Source cves: CVE-2023-0410 Source advisory: OSV:GHSA-HM7F-RQ7Q-J9XP...

qwik 跨站脚本漏洞

qwik is a micro web framework. A cross-site scripting vulnerability exists in versions prior to qwik 0.1.0-beta5. No information about this vulnerability is available at this time, please stay tuned to CNNVD or vendor announcements...