Skip to content
Threat Feed
Subscribe

Product

@Quasar/Render-Ssr-Error (<= 2.2.3)

1 brief RSS
high advisory

Quasar Framework SSR/SSG Development Server Information Disclosure and HTML Injection

The Quasar Framework development server exposes environment variables, cookies, and request headers via an unauthenticated error page that is also susceptible to HTML injection due to an incomplete sanitization routine.

@quasar/render-ssr-error +1 vulnerability cve web-application quasar
2t 1c