CVE-2026-106107

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 3.3.0, several @quasar/app-vite SSR and SSG rendering paths interpolated ssrContext.nonce directly into quoted HTML attributes. An application that derives or overrides this value with attacker-controll...

CVE-2026-106104

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.23.3, Platform.parseSSR passed an unbounded User-Agent request header to getMatch in ui/src/plugins/platform/Platform.js, whose browser-detection expressions combined greedy captures with repeated...

CVE-2026-106107

The Quasar Framework (prior to version 3.3.0 ) contains a vulnerability where several @quasar/app-vite SSR and SSG rendering paths interpolate ssrContext.nonce directly into quoted HTML attributes without sufficient constraint. If an application allows an attacker to control or derive this value,...

CVE-2026-106107 Quasar Framework: App Vite SSR and SSG nonce attributes are not safely constrained

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 3.3.0, several @quasar/app-vite SSR and SSG rendering paths interpolated ssrContext.nonce directly into quoted HTML attributes. An application that derives or overrides this value with attacker-controll...

CVE-2026-106107

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 3.3.0, several @quasar/app-vite SSR and SSG rendering paths interpolated ssrContext.nonce directly into quoted HTML attributes. An application that derives or overrides this value with attacker-controll...

CVE-2026-106107 Quasar Framework: App Vite SSR and SSG nonce attributes are not safely constrained

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 3.3.0, several @quasar/app-vite SSR and SSG rendering paths interpolated ssrContext.nonce directly into quoted HTML attributes. An application that derives or overrides this value with attacker-controll...

@cabloy/quasar-app-vite (>=2.4.0, <=2.5.10), @deepnotes/quasar-app-vite (>=2.0.0-alpha.2, <=2.0.0-alpha.42) +20 more potentially affected by CVE-2026-106106 via @quasar/render-ssr-error (1.0.4)

@quasar/render-ssr-error NPM version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on @quasar/render-ssr-error and may be impacted: - @cabloy/quasar-app-vite =2.4.0, =2.0.0-alpha.2, =0.2.3, =0.1.9, =0.0.110, =0.0.50, =3.0.1, =3.0.9, =1.3.0, =3.9.0...

CVE-2026-106106 Quasar Framework: SSR/SSG dev error page discloses the full shell environment and its </script> escape is bypassable

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to @quasar/render-ssr-error 2.2.4 and @quasar/app-vite 3.3.0, renderSSRError in utils/render-ssr-error/src/index.js used diagnostic data from utils/render-ssr-error/src/env.js to serialize process.env,...

CVE-2026-106102

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.22.0, the SSR-only getHead serializer in ui/src/plugins/meta/Meta.js used getAttr to interpolate values supplied through useMeta into title, meta, link, and script markup without HTML text or...

CVE-2026-106104 Quasar Framework: Super-linear regex backtracking on User-Agent lets one request stall a Quasar SSR server

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.23.3, Platform.parseSSR passed an unbounded User-Agent request header to getMatch in ui/src/plugins/platform/Platform.js, whose browser-detection expressions combined greedy captures with repeated...

CVE-2026-106104

The Quasar Framework (prior to version 2.23.3 ) is vulnerable to a Regular Expression Denial of Service (ReDoS) . The Platform.parseSSR() function in ui/src/plugins/platform/Platform.js processes an unbounded User-Agent request header using browser-detection expressions that combine greedy captur...

CVE-2026-106104 Quasar Framework: Super-linear regex backtracking on User-Agent lets one request stall a Quasar SSR server

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.23.3, Platform.parseSSR passed an unbounded User-Agent request header to getMatch in ui/src/plugins/platform/Platform.js, whose browser-detection expressions combined greedy captures with repeated...

CVE-2026-106102 Quasar Framework: Stored/Reflected XSS via unescaped SSR meta tag rendering in getHead()

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.22.0, the SSR-only getHead serializer in ui/src/plugins/meta/Meta.js used getAttr to interpolate values supplied through useMeta into title, meta, link, and script markup without HTML text or...

CVE-2026-106102 Quasar Framework: Stored/Reflected XSS via unescaped SSR meta tag rendering in getHead()

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.22.0, the SSR-only getHead serializer in ui/src/plugins/meta/Meta.js used getAttr to interpolate values supplied through useMeta into title, meta, link, and script markup without HTML text or...

CVE-2026-106102

The Quasar Framework contains a vulnerability in the SSR-only getHead() serializer located in ui/src/plugins/meta/Meta.js. Prior to version 2.22.0 , the getAttr() function interpolated values from useMeta() into title , meta , link , and script markup without proper HTML text or quoted-attribute ...

PT-2026-106824

Name of the Vulnerable Software and Affected Versions @quasar/render-ssr-error versions prior to 2.2.4 @quasar/app-vite versions prior to 3.3.0 Description The renderSSRError function in utils/render-ssr-error/src/index.js serializes process.env, request headers, and cookies into the HTTP page...

PT-2026-106825

Name of the Vulnerable Software and Affected Versions Quasar Framework versions prior to 3.3.0 Description Several @quasar/app-vite Server-Side Rendering SSR and Static Site Generation SSG rendering paths interpolate the ssrContext.nonce variable directly into quoted HTML attributes. If an...

PT-2026-106810

Name of the Vulnerable Software and Affected Versions Quasar Framework versions prior to 2.22.0 Description The SSR-only getHead serializer in ui/src/plugins/meta/Meta.js uses getAttr to interpolate values provided via useMeta into title, meta, link, and script markup without proper HTML text or...

CVE-2026-106102: Improper Neutralization of Input During Web Page Generation

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.22.0, the SSR-only getHead serializer in ui/src/plugins/meta/Meta.js used getAttr to interpolate values supplied through useMeta into title, meta, link, and script markup without HTML text or...

CVE-2026-106107: Improper Neutralization of Input During Web Page Generation

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 3.3.0, several @quasar/app-vite SSR and SSG rendering paths interpolated ssrContext.nonce directly into quoted HTML attributes. An application that derives or overrides this value with attacker-controll...