@
Vendor security profile
@quasar
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs6
Critical0
CISA KEV0
Public exploit1
Patch rate%0
Avg. CVSS6.8
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
0
6
CVE KEV
CVE severity distribution
6toplam CVE
High4 (67%)
Medium2 (33%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%17
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
6Unknown
Latest vulnerabilities
5.7
CVE-2026-106108
Quasar Framework: App Vite SSG page output paths can escape the configured distribution directory
Q
Patch status unknown
4.1
CVE-2026-106109
Quasar Framework: App Vite build cleanup can recursively remove unsafe configured output directories
Q
Patch status unknownEPSS %0
8.3
CVE-2026-106107
Quasar Framework: App Vite SSR and SSG nonce attributes are not safely constrained
Q
Patch status unknownEPSS %0
7.1
CVE-2026-106106
Quasar Framework: SSR/SSG dev error page discloses the full shell environment and its </script> escape is bypassable
Q
Patch status unknownEPSS %0
8.4
CVE-2026-106105
Quasar Framework: Development TLS private keys are cached with overly permissive filesystem permissions
Q
Patch status unknownEPSS %0
7.1
CVE-2026-106103
Quasar Framework: Path Traversal / Arbitrary File Write via crafted Icon Genie profile
Q
Patch status unknownEPSS %0