@
Vendor security profile
@quasar
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs5
Critical0
CISA KEV0
Public exploit1
Patch rate%0
Avg. CVSS7.0
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
0
5
CVE KEV
CVE severity distribution
5toplam CVE
High4 (80%)
Medium1 (20%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%20
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
5Unknown
Latest vulnerabilities
4.1
CVE-2026-106109
Quasar Framework: App Vite build cleanup can recursively remove unsafe configured output directories
Q
Patch status unknownEPSS %0
8.3
CVE-2026-106107
Quasar Framework: App Vite SSR and SSG nonce attributes are not safely constrained
Q
Patch status unknownEPSS %0
7.1
CVE-2026-106106
Quasar Framework: SSR/SSG dev error page discloses the full shell environment and its </script> escape is bypassable
Q
Patch status unknownEPSS %0
8.4
CVE-2026-106105
Quasar Framework: Development TLS private keys are cached with overly permissive filesystem permissions
Q
Patch status unknownEPSS %0
7.1
CVE-2026-106103
Quasar Framework: Path Traversal / Arbitrary File Write via crafted Icon Genie profile
Q
Patch status unknownEPSS %0