Code Injection

@builder.io/qwik, is vulnerable to Code Injection. The vulnerability is caused by the PureFunctionSerializer function in serializers.ts due to a lack of sanitization when deserializing data types, which allows an attacker to inject and execute malicious JavaScript into the server...