CVE-2026-106109: quasar >= 2.7.0, < 2.23.3; +1 more affected products

Affected technology

quasar · >= 2.7.0, < 2.23.3
quasarframework

app-vite · >= 1.0.0, < 3.3.0
@quasar

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Local · High privileges required · Active user interaction

What an attacker can do

Vendor/CNA’s CVSS 4.0 assessment (base score 4.1/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.