PkgSeer

Vulnerabilities

Last updated 2 hours ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
@builder.io/qwik Qwik: Crashing any Qwik Server via Resource thenable High Risk 8.0 7 hours ago 7 hours ago
@builder.io/qwik-city Qwik City has array method pollution in FormData processing allows type confusion and DoS High Risk 7.5 6 months ago 6 months ago
@builder.io/qwik Qwik vulnerable to Unauthenticated RCE via server$ Deserialization Critical 9.5 7 months ago 7 months ago
@builder.io/qwik-city Qwik City CSRF protection middleware does not work properly for content type header with parameters (eg. multipart/form-data) Medium Risk 5.9 8 months ago 8 months ago
@builder.io/qwik-city Prototype Pollution via FormData Processing in Qwik City Critical 9.3 8 months ago 8 months ago
@builder.io/qwik-city Qwik City has a CSRF Protection Bypass via Content-Type Header Validation Medium Risk 5.9 8 months ago 8 months ago
@builder.io/qwik-city Qwik City Open Redirect via fixTrailingSlash Low Risk 3.0 8 months ago 8 months ago
@builder.io/qwik-city Qwik SSR XSS via Unsafe Virtual Node Serialization Medium Risk 6.0 8 months ago 8 months ago
@builder.io/qwik-city Qwik's unhandled exception vulnerabilty can cause server crashes from malicious requests Critical 9.5 1 year ago 1 year ago
@builder.io/qwik Qwik has a potential mXSS vulnerability due to improper HTML escaping Medium Risk 6.3 2 years ago 2 years ago
@builder.io/qwik-city @builder.io/qwik-city Cross-Site Request Forgery vulnerability Medium Risk 4.7 3 years ago 2 years ago
@builder.io/qwik builderio/qwik is vulnerable to code injection Critical 9.8 3 years ago 2 years ago
@builder.io/qwik @builder.io/qwik vulnerable to Cross-site Scripting Medium Risk 6.1 3 years ago 2 years ago
Data courtesy of OSV.dev
Page 1