QW
Vendor
QwikDev
10
CVEs
0
On KEV
1
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-84994 | QW qwik QwikDev | 8.7 | Oct 13 | Qwik: Crashing any Qwik Server via Resource thenable |
| CVE-2026-32701 | QW qwik QwikDev | 7.5 | Mar 20 | Qwik has array method pollution in FormData processing, allowing type confusion and DoS |
| CVE-2026-27971 | QW qwik QwikDev | 9.8 | Mar 3 | Qwik affected by unauthenticated RCE via server$ Deserialization |
| CVE-2026-25150 | QW qwik QwikDev | 10.0 | Feb 3 | Prototype Pollution via FormData Processing in Qwik City |
| CVE-2026-25148 | QW qwik QwikDev | 6.1 | Feb 3 | Qwik SSR XSS via Unsafe Virtual Node Serialization |
| CVE-2026-25151 | QW qwik QwikDev | 5.9 | Feb 3 | Qwik City has a CSRF Protection Bypass via Content-Type Header Validation |
| CVE-2026-25155 | QW qwik QwikDev | 7.1 | Feb 3 | [qwik-city] CSRF protection middleware does not work properly for content type header with parameters (eg. multipart/form-data) |
| CVE-2026-25149 | QW qwik QwikDev | 6.1 | Feb 3 | Qwik City Open Redirect via fixTrailingSlash |
| CVE-2025-53620 | QW qwik QwikDev | 9.2 | Jul 9 | Crashing any Qwik Server |
| CVE-2024-41677 | QW qwik QwikDev | 6.1 | Aug 6 | Cross-site Scripting (XSS) vulnerability due to improper HTML escaping in qwik |