@builder.io/qwik-city vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-32701High@builder.io/qwik-city: Qwik City has array method pollution in FormData processing allows type confusion and DoS CVE-2026-25155Medium@builder.io/qwik-city: Qwik City CSRF protection middleware does not work properly for content type header with parameters…CVE-2026-25149Low@builder.io/qwik-city: Qwik City Open Redirect via fixTrailingSlash CVE-2026-25151Medium@builder.io/qwik-city: Qwik City has a CSRF Protection Bypass via Content-Type Header Validation CVE-2026-25150Critical@builder.io/qwik-city: Prototype Pollution via FormData Processing in Qwik City CVE-2026-25148Medium@builder.io/qwik-city: Qwik SSR XSS via Unsafe Virtual Node Serialization CVE-2025-53620Critical@builder.io/qwik-city: Qwik's unhandled exception vulnerabilty can cause server crashes from malicious requests CVE-2023-2307Medium@builder.io/qwik-city: @builder.io/qwik-city Cross-Site Request Forgery vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo