@quasar app-vite
5 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-106108 | >= 3.1.0, < 3.3.0 | Quasar Framework: App Vite SSG page output paths can escape the configured distribution directory | MEDIUM 5.7 | 0.1 % | ||
| CVE-2026-106109 | >= 1.0.0, < 3.3.0 | Quasar Framework: App Vite build cleanup can recursively remove unsafe configured output directories | MEDIUM 4.1 | 0.1 % | ||
| CVE-2026-106107 | < 3.3.0 | Quasar Framework: App Vite SSR and SSG nonce attributes are not safely constrained | HIGH 8.3 | 0.3 % | ||
| CVE-2026-106106 | < 3.3.0 | Quasar Framework: SSR/SSG dev error page discloses the full shell environment and its </script> escape is bypassable | HIGH 7.1 | 0.3 % | ||
| CVE-2026-106105 | < 3.3.0 | Quasar Framework: Development TLS private keys are cached with overly permissive filesystem permissions | HIGH 8.4 | 0.1 % |