Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

npm

@builder.io/qwik-city

npm

The meta-framework for Qwik.

View on github.com · View on npmjs.org

Security Advisories for @builder.io/qwik-city in npm

High
5 months ago

Qwik City has array method pollution in FormData processing allows type confusion and DoS GSA_kwCzR0hTQS13aGh2LWdnNXYtODY0cs4ABT6l

npm @builder.io/qwik-city
Moderate
6 months ago

Qwik City CSRF protection middleware does not work properly for content type header with parameters (eg. multipart/form-data) GSA_kwCzR0hTQS12bTZnLThyNGgtMjJ4OM4ABR48

npm @builder.io/qwik-city
Low
6 months ago

Qwik City Open Redirect via fixTrailingSlash GSA_kwCzR0hTQS05Mmo3LXdnbWctZjMybc4ABR47

npm @builder.io/qwik-city
Moderate
6 months ago

Qwik City has a CSRF Protection Bypass via Content-Type Header Validation GSA_kwCzR0hTQS1yNjY2LThnamYtNHY1Zs4ABR46

npm @builder.io/qwik-city
Critical
6 months ago

Prototype Pollution via FormData Processing in Qwik City GSA_kwCzR0hTQS14cWc2LTk4Y3ctZ3hocc4ABR45

npm @builder.io/qwik-city
Moderate
6 months ago

Qwik SSR XSS via Unsafe Virtual Node Serialization GSA_kwCzR0hTQS1tNmpxLWc3Z3EtNXczY84ABR44

npm @builder.io/qwik-city
Critical
about 1 year ago

Qwik's unhandled exception vulnerabilty can cause server crashes from malicious requests GSA_kwCzR0hTQS1xcjloLWo2eGctMmo3Ms4ABJ9x

npm @builder.io/qwik-city
Potential
Moderate
about 2 years ago

Qwik has a potential mXSS vulnerability due to improper HTML escaping GSA_kwCzR0hTQS0ycndqLTd4cTgtNGd4NM4AA-a5

npm @builder.io/qwik
Moderate
over 3 years ago

@builder.io/qwik-city Cross-Site Request Forgery vulnerability GSA_kwCzR0hTQS1jNTR3LTdqNWYteGc5OM4AAy-0

npm @builder.io/qwik-city

Filter by Severity

Moderate 5 Critical 2 Low 1 High 1