tocsin

CVE-2026-106105

3 advisories.

npm/@quasar/ssl-certificate CVE-2026-106105: high, EPSS 0.07%

Quasar Framework: Development TLS private keys are cached with overly permissive filesystem permissions

Action: Upgrade @quasar/ssl-certificate to 2.1.0 or later.

npm i @quasar/ssl-certificate@2.1.0

Affected

introducedfixedlast affected
02.1.0-

Fixed versions

2.1.0

Sources

CVE-2026-106105 · published · modified · JSON

npm/@quasar/cli CVE-2026-106105: high, EPSS 0.07%

Quasar Framework: Development TLS private keys are cached with overly permissive filesystem permissions

Action: Upgrade @quasar/cli to 5.0.4 or later.

npm i @quasar/cli@5.0.4

Affected

introducedfixedlast affected
05.0.4-

Fixed versions

5.0.4

Sources

CVE-2026-106105 · published · modified · JSON

npm/@quasar/app-vite CVE-2026-106105: high, EPSS 0.07%

Quasar Framework: Development TLS private keys are cached with overly permissive filesystem permissions

Action: Upgrade @quasar/app-vite to 3.3.0 or later.

npm i @quasar/app-vite@3.3.0

Affected

introducedfixedlast affected
03.3.0-

Fixed versions

3.3.0

Sources

CVE-2026-106105 · published · modified · JSON