@quasar cli vulnerabilities

Latest @quasar cli CVEs

Newest publication first

1. CVE-2026-106105 Quasar Framework: Development TLS private keys are cached with overly permissive filesystem permissions

   Published 2026-10-06

   High·CVSS 8.4 EPSS 0.07%

   Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to @quasar/ssl-certificate 2.1.0, @quasar/cli 5.0.4, and @quasar/app-vite 3.3.0, the @quasar/ssl-certificate utility cached a combined private key and certificate PEM without explicitly ap...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.