Skip to content
Threat Feed
Subscribe

Product

App-Vite (<= 3.2.0)

1 brief RSS
high advisory

Quasar Framework App Vite SSR and SSG Nonce Attribute Injection

The @quasar/app-vite package (<= 3.2.0) is vulnerable to attribute injection in SSR and SSG renderer paths where unsanitized nonce values can be used to inject arbitrary HTML attributes.

app-vite web-vulnerability injection quasar cve-2026-106107
1t 1c