npm/@builder.io/qwik-city CVE-2026-32701: high 7.5, EPSS 0.59%
Qwik City has array method pollution in FormData processing allows type confusion and DoS
Action: Upgrade @builder.io/qwik-city to 1.19.2 or later.
npm i @builder.io/qwik-city@1.19.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.19.2 | - |
Fixed versions
| 1.19.2 |
Sources
- osv: GHSA-whhv-gg5v-864r
- https://github.com/QwikDev/qwik/security/advisories/GHSA-whhv-gg5v-864r
- https://nvd.nist.gov/vuln/detail/CVE-2026-32701
- https://github.com/QwikDev/qwik/commit/7b5867c3dd8925df9aa96c4296b1e95a4c2af87d
- https://github.com/QwikDev/qwik
CVE-2026-32701 · published · modified · JSON