Vulnerabilities in QwikDev

9 results

Vexday analysis

QwikDev apresenta 9 vulnerabilidades catalogadas, das quais 3 são críticas, mas nenhuma está sendo explorada ativamente no momento. Não houve publicações recentes nos últimos 90 dias, indicando um cenário de risco estabilizado. A fraqueza dominante (CWE-1321) sugere imprecisão em cálculos ou lógica, exigindo validação de controles em operações sensíveis.

CVE-2026-27971CRITICALQwik affected by unauthenticated RCE via server$ DeserializationEPSS 5.4%CVE-2026-25150CRITICALPrototype Pollution via FormData Processing in Qwik CityEPSS 0.6%CVE-2024-41677MEDIUMCross-site Scripting (XSS) vulnerability due to improper HTML escaping in qwikEPSS 0.5%CVE-2026-32701HIGHQwik has array method pollution in FormData processing, allowing type confusion and DoSEPSS 0.4%CVE-2026-25148MEDIUMQwik SSR XSS via Unsafe Virtual Node SerializationEPSS 0.3%CVE-2025-53620CRITICALCrashing any Qwik ServerEPSS 0.3%CVE-2026-25149LOWQwik City Open Redirect via fixTrailingSlashEPSS 0.2%CVE-2026-25151MEDIUMQwik City has a CSRF Protection Bypass via Content-Type Header ValidationEPSS 0.2%CVE-2026-25155MEDIUM[qwik-city] CSRF protection middleware does not work properly for content type header with parameters (eg. multipart/form-data)EPSS 0.1%