qwik kayıtları
qwik üreticisine ait 11 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-352 Cross-Site Request Forgery (CSRF)3
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')1
- CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
11 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2026-25150İstismar yok | Prototype Pollution via FormData Processing in Qwik Cityqwik · qwik · CWE-1321 | Kritik10,0 | — | %0,7 | 3 Şub 2026 |
39İzleyin | CVE-2023-1283İstismar yok | Code Injection in builderio/qwikqwik · qwik · CWE-94 | Kritik9,8 | — | %1,1 | 8 Mar 2023 |
37İzleyin | CVE-2026-27971Kavram kanıtı | Qwik affected by unauthenticated RCE via server$ Deserializationqwik · qwik · CWE-502 | Kritik9,2 | — | %2,9 | 3 Mar 2026 |
30İzleyin | CVE-2026-32701İstismar yok | Qwik has array method pollution in FormData processing, allowing type confusion and DoSqwik · qwik · CWE-843 | Yüksek7,5 | — | %0,5 | 20 Mar 2026 |
28İzleyin | CVE-2026-25155İstismar yok | [qwik-city] CSRF protection middleware does not work properly for content type header with parameters (eg. multipart/form-data)qwik · qwik · CWE-352 | Yüksek7,1 | — | %0,1 | 3 Şub 2026 |
26İzleyin | CVE-2023-2307İstismar yok | Cross-Site Request Forgery (CSRF) in builderio/qwikqwik · qwik · CWE-352 | Orta6,5 | — | %0,3 | 26 Nis 2023 |
24İzleyin | CVE-2024-41677İstismar yok | Cross-site Scripting (XSS) vulnerability due to improper HTML escaping in qwikqwik · qwik · CWE-79 | Orta6,1 | — | %0,5 | 6 Ağu 2024 |
24İzleyin | CVE-2023-0410İstismar yok | Cross-site Scripting (XSS) - Generic in builderio/qwikqwik · qwik · CWE-79 | Orta6,1 | — | %0,5 | 19 Oca 2023 |
23İzleyin | CVE-2026-25151İstismar yok | Qwik City has a CSRF Protection Bypass via Content-Type Header Validationqwik · qwik · CWE-352 | Orta5,9 | — | %0,2 | 3 Şub 2026 |
21İzleyin | CVE-2026-25148İstismar yok | Qwik SSR XSS via Unsafe Virtual Node Serializationqwik · qwik · CWE-79 | Orta5,3 | — | %0,3 | 3 Şub 2026 |
10İzleyin | CVE-2026-25149İstismar yok | Qwik City Open Redirect via fixTrailingSlashqwik · qwik · CWE-601 | Düşük2,7 | — | %0,3 | 3 Şub 2026 |
- CVE-2026-2515040Planlayın
Prototype Pollution via FormData Processing in Qwik City
KritikCVSS 10,0İstismar yokEPSS %1qwik · qwik3 Şub 2026
- CVE-2023-128339İzleyin
Code Injection in builderio/qwik
KritikCVSS 9,8İstismar yokEPSS %1qwik · qwik8 Mar 2023
- CVE-2026-2797137İzleyin
Qwik affected by unauthenticated RCE via server$ Deserialization
KritikCVSS 9,2Kavram kanıtıEPSS %3qwik · qwik3 Mar 2026
- CVE-2026-3270130İzleyin
Qwik has array method pollution in FormData processing, allowing type confusion and DoS
YüksekCVSS 7,5İstismar yokEPSS %1qwik · qwik20 Mar 2026
- CVE-2026-2515528İzleyin
[qwik-city] CSRF protection middleware does not work properly for content type header with parameters (eg. multipart/form-data)
YüksekCVSS 7,1İstismar yokEPSS %0qwik · qwik3 Şub 2026
- CVE-2023-230726İzleyin
Cross-Site Request Forgery (CSRF) in builderio/qwik
OrtaCVSS 6,5İstismar yokEPSS %0qwik · qwik26 Nis 2023
- CVE-2024-4167724İzleyin
Cross-site Scripting (XSS) vulnerability due to improper HTML escaping in qwik
OrtaCVSS 6,1İstismar yokEPSS %0qwik · qwik6 Ağu 2024
- CVE-2023-041024İzleyin
Cross-site Scripting (XSS) - Generic in builderio/qwik
OrtaCVSS 6,1İstismar yokEPSS %0qwik · qwik19 Oca 2023
- CVE-2026-2515123İzleyin
Qwik City has a CSRF Protection Bypass via Content-Type Header Validation
OrtaCVSS 5,9İstismar yokEPSS %0qwik · qwik3 Şub 2026
- CVE-2026-2514821İzleyin
Qwik SSR XSS via Unsafe Virtual Node Serialization
OrtaCVSS 5,3İstismar yokEPSS %0qwik · qwik3 Şub 2026
- CVE-2026-2514910İzleyin
Qwik City Open Redirect via fixTrailingSlash
DüşükCVSS 2,7İstismar yokEPSS %0qwik · qwik3 Şub 2026