Browse CVEs

HIGH 7.5 CVE-2026-32701 Qwik is a performance-focused JavaScript framework. Versions prior to 1.19.2 improperly inferred arrays from dotted form field names during FormData … Qwik 1.19.2+ Fix from $1,9502026-03-20 CRITICAL 9.8 CVE-2026-27971EPSS 5% Qwik is a performance focused javascript framework. qwik <=1.19.0 is vulnerable to RCE due to an unsafe deserialization vulnerability in the server$ … Qwik 1.19.1+ Fix from $2,3002026-03-03 CRITICAL 10.0 CVE-2026-25150 Qwik is a performance focused javascript framework. Prior to version 1.19.0, a prototype pollution vulnerability exists in the formToObj() function w… Qwik 1.19.0+ Fix from $2,3002026-02-03 HIGH 7.1 CVE-2026-25155 Qwik is a performance focused javascript framework. Prior to version 1.12.0, a typo in the regular expression within isContentType causes incorrect p… Qwik 1.12.0+ Fix from $1,9502026-02-03 MEDIUM 6.1 CVE-2026-25148 Qwik is a performance focused javascript framework. Prior to version 1.19.0, a Cross-Site Scripting vulnerability in Qwik.js' server-side rendering v… Qwik 1.19.0+ Fix from $1,6002026-02-03 MEDIUM 6.1 CVE-2026-25149 Qwik is a performance focused javascript framework. Prior to version 1.19.0, an Open Redirect vulnerability in Qwik City's default request handler mi… Qwik 1.19.0+ Fix from $1,6002026-02-03 MEDIUM 5.9 CVE-2026-25151 Qwik is a performance focused javascript framework. Prior to version 1.19.0, Qwik City’s server-side request handler inconsistently interprets HTTP r… Qwik 1.19.0+ Fix from $1,6002026-02-03 MEDIUM 6.1 CVE-2024-41677 Qwik is a performance focused javascript framework. A potential mutation XSS vulnerability exists in Qwik for versions up to but not including 1.6.0.… Qwik 1.7.3+ Fix from $1,6002024-08-06 MEDIUM 6.5 CVE-2023-2307 Cross-Site Request Forgery (CSRF) in GitHub repository builderio/qwik prior to 0.104.0. Qwik 0.104.0+ Fix from $1,6002023-04-26 CRITICAL 9.8 CVE-2023-1283 Code Injection in GitHub repository builderio/qwik prior to 0.21.0. Qwik 0.21.0+ Fix from $2,3002023-03-08 MEDIUM 6.1 CVE-2023-0410 Cross-site Scripting (XSS) - Generic in GitHub repository builderio/qwik prior to 0.1.0-beta5. Qwik 0.16.2+ Fix from $1,6002023-01-20