Vulnerabilities

Last updated 9 minutes ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
quasar Quasar Framework: Stored/Reflected XSS via unescaped SSR meta tag rendering in getHead() Critical 10.0 4 hours ago 4 hours ago
@quasar/app-vite Quasar Framework: App Vite build cleanup can recursively remove unsafe configured output directories Medium Risk 6.0 4 hours ago 4 hours ago
@quasar/app-vite Quasar Framework: App Vite SSR and SSG nonce attributes are not safely constrained High Risk 8.0 4 hours ago 4 hours ago
quasar Quasar Framework: Super-linear regex backtracking on User-Agent lets one request stall a Quasar SSR server High Risk 8.0 4 hours ago 4 hours ago
@quasar/app-vite Quasar Framework: Development TLS private keys are cached with overly permissive filesystem permissions High Risk 8.0 4 hours ago 4 hours ago
@quasar/cli Quasar Framework: Development TLS private keys are cached with overly permissive filesystem permissions High Risk 8.0 4 hours ago 4 hours ago
@quasar/ssl-certificate Quasar Framework: Development TLS private keys are cached with overly permissive filesystem permissions High Risk 8.0 4 hours ago 4 hours ago
@quasar/app-vite Quasar Framework: SSR/SSG dev error page discloses the full shell environment and its </script> escape is bypassable High Risk 8.0 4 hours ago 4 hours ago
@quasar/render-ssr-error Quasar Framework: SSR/SSG dev error page discloses the full shell environment and its </script> escape is bypassable High Risk 8.0 4 hours ago 4 hours ago
@quasar/app-vite Quasar Framework: App Vite SSG page output paths can escape the configured distribution directory Medium Risk 6.0 4 hours ago 4 hours ago
@quasar/icongenie Quasar Framework: Path Traversal / Arbitrary File Write via crafted Icon Genie profile High Risk 7.1 4 hours ago 4 hours ago
quasar Quasar: Prototype pollution in the extend() utility Medium Risk 5.6 2 months ago 1 month ago
andromeda-impulse-quasarjet-elara Malicious code in andromeda-impulse-quasarjet-elara (npm) Unknown 10 months ago 10 months ago
antares-quasarjet-winston-superflare Malicious code in antares-quasarjet-winston-superflare (npm) Unknown 10 months ago 10 months ago
arcturus-magellan-bellatrix-quasarjet Malicious code in arcturus-magellan-bellatrix-quasarjet (npm) Unknown 10 months ago 10 months ago
async-iota-pavo-quasar Malicious code in async-iota-pavo-quasar (npm) Unknown 10 months ago 10 months ago
avior-quasar-comet-bootstrap Malicious code in avior-quasar-comet-bootstrap (npm) Unknown 10 months ago 10 months ago
betelgeuse-dactyl-rollup-plugin-quasarjet Malicious code in betelgeuse-dactyl-rollup-plugin-quasarjet (npm) Unknown 10 months ago 10 months ago
bioinformatics-async-wezen-quasar Malicious code in bioinformatics-async-wezen-quasar (npm) Unknown 10 months ago 10 months ago
biosignature-quasar-galaxy-charon Malicious code in biosignature-quasar-galaxy-charon (npm) Unknown 10 months ago 10 months ago
castor-callisto-miranda-quasar Malicious code in castor-callisto-miranda-quasar (npm) Unknown 10 months ago 10 months ago
centaurus-quasar-module-rimraf Malicious code in centaurus-quasar-module-rimraf (npm) Unknown 10 months ago 10 months ago
chai-blazar-quasar-link Malicious code in chai-blazar-quasar-link (npm) Unknown 10 months ago 10 months ago
chalk-paleontology-quasar-taurus Malicious code in chalk-paleontology-quasar-taurus (npm) Unknown 10 months ago 10 months ago
cluster-tool-quasarjet-meteor Malicious code in cluster-tool-quasarjet-meteor (npm) Unknown 10 months ago 10 months ago
cosmicsilence-quasar-vulcan-gammarayburst Malicious code in cosmicsilence-quasar-vulcan-gammarayburst (npm) Unknown 10 months ago 10 months ago
cosmogenic-spinner-andromeda-quasarjet Malicious code in cosmogenic-spinner-andromeda-quasarjet (npm) Unknown 10 months ago 10 months ago
delphinus-chromedriver-quasar-cordelia Malicious code in delphinus-chromedriver-quasar-cordelia (npm) Unknown 10 months ago 10 months ago
draco-quasarjet-envconfig-technocracy Malicious code in draco-quasarjet-envconfig-technocracy (npm) Unknown 10 months ago 10 months ago
elara-triton-quasar-async Malicious code in elara-triton-quasar-async (npm) Unknown 10 months ago 10 months ago
entanglement-levels-leda-quasar Malicious code in entanglement-levels-leda-quasar (npm) Unknown 10 months ago 10 months ago
express-buffer-quasar-reveal-md Malicious code in express-buffer-quasar-reveal-md (npm) Unknown 10 months ago 10 months ago
extremophile-fornax-quasar-carpo Malicious code in extremophile-fornax-quasar-carpo (npm) Unknown 10 months ago 10 months ago
gammarayburst-quasarjet-radiometric-lyra Malicious code in gammarayburst-quasarjet-radiometric-lyra (npm) Unknown 10 months ago 10 months ago
husky-eridanus-quasar-geckodriver Malicious code in husky-eridanus-quasar-geckodriver (npm) Unknown 10 months ago 10 months ago
hydra-cryovolcano-darkmatter-quasarjet Malicious code in hydra-cryovolcano-darkmatter-quasarjet (npm) Unknown 10 months ago 10 months ago
inquirer-quasar-polaris-aquarius Malicious code in inquirer-quasar-polaris-aquarius (npm) Unknown 10 months ago 10 months ago
interstellarmedium-coronalmassejection-hadron-quasar Malicious code in interstellarmedium-coronalmassejection-hadron-quasar (npm) Unknown 10 months ago 10 months ago
kardashevscale-dotenv-safe-callisto-quasarjet Malicious code in kardashevscale-dotenv-safe-callisto-quasarjet (npm) Unknown 10 months ago 10 months ago
karma-remark-meissa-quasarjet Malicious code in karma-remark-meissa-quasarjet (npm) Unknown 10 months ago 10 months ago
leda-loopback-markdown-pdf-quasar Malicious code in leda-loopback-markdown-pdf-quasar (npm) Unknown 10 months ago 10 months ago
lightyear-cors-quasar-procyon Malicious code in lightyear-cors-quasar-procyon (npm) Unknown 10 months ago 10 months ago
mantle-asteroid-charon-quasar Malicious code in mantle-asteroid-charon-quasar (npm) Unknown 10 months ago 10 months ago
materialize-stop-quasar-outercore Malicious code in materialize-stop-quasar-outercore (npm) Unknown 10 months ago 10 months ago
mechatronics-boson-quasarjet-wolf Malicious code in mechatronics-boson-quasarjet-wolf (npm) Unknown 10 months ago 10 months ago
mysql-quasar-nodejs-node-sass Malicious code in mysql-quasar-nodejs-node-sass (npm) Unknown 10 months ago 10 months ago
native-quasar-middleware-cz-conventional-changelog Malicious code in native-quasar-middleware-cz-conventional-changelog (npm) Unknown 10 months ago 10 months ago
nuxtjs-heka-google-quasar Malicious code in nuxtjs-heka-google-quasar (npm) Unknown 10 months ago 10 months ago
nuxtjs-quasarjet-cross-env-taurus Malicious code in nuxtjs-quasarjet-cross-env-taurus (npm) Unknown 10 months ago 10 months ago
outercore-quasarjet-ora-saturnology Malicious code in outercore-quasarjet-ora-saturnology (npm) Unknown 10 months ago 10 months ago