CVE-2026-106102 Quasar Framework: Stored/Reflected XSS via unescaped SSR meta tag rendering in getHead()

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.22.0, the SSR-only getHead serializer in ui/src/plugins/meta/Meta.js used getAttr to interpolate values supplied through useMeta into title, meta, link, and script markup without HTML text or...

CVE-2026-106102 Quasar Framework: Stored/Reflected XSS via unescaped SSR meta tag rendering in getHead()

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.22.0, the SSR-only getHead serializer in ui/src/plugins/meta/Meta.js used getAttr to interpolate values supplied through useMeta into title, meta, link, and script markup without HTML text or...

CVE-2026-106102

The Quasar Framework contains a vulnerability in the SSR-only getHead() serializer located in ui/src/plugins/meta/Meta.js. Prior to version 2.22.0 , the getAttr() function interpolated values from useMeta() into title , meta , link , and script markup without proper HTML text or quoted-attribute ...

CVE-2026-106101 Quasar Framework: DOM Clobbering in Quasar openURL() SafariViewController Integration Causes Client-Side Denial of Service

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.32.2, the openURL utility in ui/src/utils/open-url/open-url.js trusted window.SafariViewController whenever that global existed in an iOS environment. Attacker-controlled HTML rendered by components...

@payloadcms/next (>=4.0.0-canary.1, <=4.0.0-canary.33), @payloadcms/plugin-cloud-storage (>=4.0.0-canary.1, <=4.0.0-canary.33) +19 more potentially affected by CVE-2026-105858 via @payloadcms/ui (>=4.0.0-canary.1, <=4.0.0-canary.33)

@payloadcms/ui NPM version =4.0.0-canary.1, =4.0.0-canary.1, =4.0.0-canary.1, =4.0.0-canary.1, =4.0.0-canary.1, =4.0.0-canary.1, =4.0.0-canary.1, =4.0.0-canary.1, =4.0.0-canary.1, =4.0.0-canary.1, =4.0.0-canary.1, =4.0.0-canary.1, =4.0.0-canary.1, =4.0.0-canary.1, =4.0.0-canary.1, =4.0.0-canary.1...

@01.software/cli (>=0.1.1, <=0.2.0), @01.software/sdk (>=0.0.1-251022.145258, <=0.3.0) +81 more potentially affected by CVE-2026-105849 via @payloadcms/ui (>=3.0.0, <=3.89.0)

@payloadcms/ui NPM version =3.0.0, =0.1.1, =0.0.1-251022.145258, =0.0.6, =3.70.0, =0.0.25, =3.39.2, =1.0.1-beta.3, =0.2.2, =0.14.0, =0.14.0, =0.14.0, =0.0.1, =0.23.0 and more Source cves: CVE-2026-105849 Source advisory: SNYK:JS-PAYLOADCMSUI-20571453...

@payloadcms/next (>=4.0.0-canary.0, <=4.0.0-canary.33), @payloadcms/plugin-cloud-storage (>=4.0.0-canary.0, <=4.0.0-canary.33) +19 more potentially affected by CVE-2026-105849 via @payloadcms/ui (>=4.0.0-canary.0, <=4.0.0-canary.33)

@payloadcms/ui NPM version =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.1, =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.0...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via document read operations that return the apiKey field without omitting it, allowing an authenticated user with read access to other user documents to retrieve those users' active API keys in plaintext. The fix...

CVE-2026-105784

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.13, selecting a note containing a jsoncanvas fence causes the whiteboard text and file-node components in...

CVE-2026-106345: Operation on a Resource after Expiration or Release

Use of released resource in Session in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

PT-2026-106902

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description UI misrepresentation in FileSystem allows a remote attacker to bypass system access restrictions through the use of a crafted HTML page and social engineering. Recommendations Update...

CVE-2026-106400: Improper Restriction of Rendered UI Layers or Frames

Clickjacking in Messages in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106416: Improper Control of Generation of Code

Code injection in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-106420: Incorrect Calculation

Incorrect calculation in API in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-106338: User Interface (UI) Misrepresentation of Critical Information

UI misrepresentation in PictureInPicture in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106368: User Interface (UI) Misrepresentation of Critical Information

UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106380: User Interface (UI) Misrepresentation of Critical Information

UI misrepresentation in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106391: Incorrect Authorization

Incorrect authorization in WebShare in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106356: Improper Restriction of Rendered UI Layers or Frames

Clickjacking in EVP in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

PT-2026-106924

UI misrepresentation in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted network traffic. Chromium security severity: Low...