Vulnerability index

Browse CVEs

11 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Qwik HIGH 7.5
CVE-2026-32701

Qwik is a performance-focused JavaScript framework. Versions prior to 1.19.2 improperly inferred arrays from dotted form field names during FormData …

Fix: 1.19.2+
Fix from $1,950 2026-03-20
Qwik CRITICAL 9.8
CVE-2026-27971EPSS 5%

Qwik is a performance focused javascript framework. qwik <=1.19.0 is vulnerable to RCE due to an unsafe deserialization vulnerability in the server$ …

Fix: 1.19.1+
Fix from $2,300 2026-03-03
Qwik CRITICAL 10.0
CVE-2026-25150

Qwik is a performance focused javascript framework. Prior to version 1.19.0, a prototype pollution vulnerability exists in the formToObj() function w…

Fix: 1.19.0+
Fix from $2,300 2026-02-03
Qwik HIGH 7.1
CVE-2026-25155

Qwik is a performance focused javascript framework. Prior to version 1.12.0, a typo in the regular expression within isContentType causes incorrect p…

Fix: 1.12.0+
Fix from $1,950 2026-02-03
Qwik MEDIUM 6.1
CVE-2026-25148

Qwik is a performance focused javascript framework. Prior to version 1.19.0, a Cross-Site Scripting vulnerability in Qwik.js' server-side rendering v…

Fix: 1.19.0+
Fix from $1,600 2026-02-03
Qwik MEDIUM 6.1
CVE-2026-25149

Qwik is a performance focused javascript framework. Prior to version 1.19.0, an Open Redirect vulnerability in Qwik City's default request handler mi…

Fix: 1.19.0+
Fix from $1,600 2026-02-03
Qwik MEDIUM 5.9
CVE-2026-25151

Qwik is a performance focused javascript framework. Prior to version 1.19.0, Qwik City’s server-side request handler inconsistently interprets HTTP r…

Fix: 1.19.0+
Fix from $1,600 2026-02-03
Qwik MEDIUM 6.1
CVE-2024-41677

Qwik is a performance focused javascript framework. A potential mutation XSS vulnerability exists in Qwik for versions up to but not including 1.6.0.…

Fix: 1.7.3+
Fix from $1,600 2024-08-06
Qwik MEDIUM 6.5
CVE-2023-2307

Cross-Site Request Forgery (CSRF) in GitHub repository builderio/qwik prior to 0.104.0.

Fix: 0.104.0+
Fix from $1,600 2023-04-26
Qwik CRITICAL 9.8
CVE-2023-1283

Code Injection in GitHub repository builderio/qwik prior to 0.21.0.

Fix: 0.21.0+
Fix from $2,300 2023-03-08
Qwik MEDIUM 6.1
CVE-2023-0410

Cross-site Scripting (XSS) - Generic in GitHub repository builderio/qwik prior to 0.1.0-beta5.

Fix: 0.16.2+
Fix from $1,600 2023-01-20