Lucene search
+L

2 matches found

Cvelist
Cvelist
added 2025/07/09 6:45 p.m.15 views

CVE-2025-53620 Crashing any Qwik Server

@builder.io/qwik-city is the meta-framework for Qwik. When a Qwik Server Action QRL is executed it dynamically load the file containing the symbol. When an invalid qfunc is sent, the server does not handle the thrown error. The error then causes Node JS to exit. This vulnerability is fixed in...

9.2CVSS0.00304EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2025/07/09 6:10 p.m.12 views

Qwik's unhandled exception vulnerabilty can cause server crashes from malicious requests

Summary Possibility to craft a request that will crash the Qwik Server in the default configuration. Details When a Qwik Server Action QRL is executed it dynamically load the file containing the symbol. When an invalid qfunc is sent, the server does not handle the thrown error. The error then...

9.2CVSS7.2AI score0.00304EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder