npm - OSV

GHSA-fh39-c73x-5pjv

npm/@quasar/app-vite
npm/@quasar/cli
npm/@quasar/ssl-certificate

Quasar Framework: Development TLS private keys are cached with overly... 07 Oct

Fix available
Severity - 8.4 (High)

GHSA-r5mf-4r5x-q78f

npm/@quasar/app-vite
npm/@quasar/render-ssr-error

Quasar Framework: SSR/SSG dev error page discloses the full shell environment... 07 Oct

Fix available
Severity - 7.1 (High)

GHSA-5m6h-8g35-p3m7

npm/@quasar/app-vite

Quasar Framework: App Vite SSR and SSG nonce attributes are not safely... 07 Oct

Fix available
Severity - 8.3 (High)

GHSA-vhhq-m2gm-rwc9

npm/@quasar/app-vite

Quasar Framework: App Vite SSG page output paths can escape the configured... 07 Oct

Fix available
Severity - 5.6 (Medium)

GHSA-q9mq-245r-4g93

npm/@quasar/app-vite

Quasar Framework: App Vite build cleanup can recursively remove unsafe... 07 Oct

Fix available
Severity - 4.1 (Medium)

MAL-2026-17222

npm/vite-plugin-crypto

Malicious code in vite-plugin-crypto (npm) 28 Sep

No fix available

MAL-2026-16474

npm/vite-dev-launcher

Malicious code in vite-dev-launcher (npm) 23 Sep

No fix available

MAL-2026-16433

npm/@vitemirrorte/element-plus-vite-cli

Malicious code in @vitemirrorte/element-plus-vite-cli (npm) 23 Sep

No fix available

MAL-2026-16371

npm/@vite-tab/tabui

Malicious code in @vite-tab/tabui (npm) 21 Sep

No fix available

MAL-2026-16331

npm/element-plus-vite-cli

Malicious code in element-plus-vite-cli (npm) 21 Sep

No fix available

MAL-2026-14482

npm/vite-plugin-images-analysis

Malicious code in vite-plugin-images-analysis (npm) 25 Aug

No fix available

MAL-2026-14481

npm/vite-plugin-image-tracker

Malicious code in vite-plugin-image-tracker (npm) 25 Aug

No fix available

MAL-2026-14479

npm/vite-plugin-bug-tracker

Malicious code in vite-plugin-bug-tracker (npm) 25 Aug

No fix available

MAL-2026-14480

npm/vite-plugin-image-analysis

Malicious code in vite-plugin-image-analysis (npm) 25 Aug

No fix available

MAL-2026-14226

npm/animate-css-vite

Malicious code in animate-css-vite (npm) 19 Aug

No fix available

MAL-2026-14140

npm/vite-svg-config

Malicious code in vite-svg-config (npm) 18 Aug

No fix available

Vulnerabilities