npm/quasar CVE-2026-73647: medium 5.6, EPSS 0.39%
Quasar: Prototype pollution in the extend() utility
Action: Upgrade quasar to 2.22.0 or later.
npm i quasar@2.22.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.22.0 | - |
Fixed versions
| 2.22.0 |
Sources
- osv: GHSA-3r53-75j5-3g7j
- https://github.com/quasarframework/quasar/security/advisories/GHSA-3r53-75j5-3g7j
- https://github.com/quasarframework/quasar/commit/d0a95d95ab3c29d13e1b8ba8c5e5025fd6ce35e7
- https://github.com/quasarframework/quasar
- https://github.com/quasarframework/quasar/releases/tag/quasar-v2.22.0
CVE-2026-73647 · published · modified · JSON