CVE-2026-106103
1 advisory.
npm/@quasar/icongenie CVE-2026-106103: high 7.1, EPSS 0.29%
Quasar Framework: Path Traversal / Arbitrary File Write via crafted Icon Genie profile
Action: Upgrade @quasar/icongenie to 6.1.1 or later.
npm i @quasar/icongenie@6.1.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.1.1 | - |
Fixed versions
| 6.1.1 |
Sources
- osv: GHSA-wmpw-j6qv-mw88
- https://github.com/quasarframework/quasar/security/advisories/GHSA-wmpw-j6qv-mw88
- https://nvd.nist.gov/vuln/detail/CVE-2026-106103
- https://github.com/quasarframework/quasar/commit/87c89a80ec84f1eb7dbe258e5367161b0598ceb3
- https://github.com/quasarframework/quasar
- https://github.com/quasarframework/quasar/releases/tag/@quasar/icongenie-v6.1.1
CVE-2026-106103 · published · modified · JSON