Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/03/02 9:41 p.m.18 views

Qwik vulnerable to Unauthenticated RCE via server$ Deserialization

Summary qwik =1.19.0 is vulnerable to RCE due to an unsafe deserialization vulnerability in the server$ RPC mechanism that allows any unauthenticated user to execute arbitrary code on the server with a single HTTP request. Affects any deployment where require is available at runtime. Impact -...

9.8CVSS6.5AI score0.05416EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder