{"action":"Upgrade @builder.io/qwik-city to 1.13.0 or later.","affected":[{"fixed":"1.13.0","introduced":"0"}],"component":"@builder.io/qwik-city","cve_ids":["CVE-2025-53620"],"ecosystem":"npm","epss":0.00356,"exploited":false,"fixed_versions":["1.13.0"],"ghsa_id":"GHSA-qr9h-j6xg-2j72","id":"tcs_01M5KG70SSJ1MQ6MDG08CPMHYZ","modified_at":"2025-07-09T22:37:21Z","published_at":"2025-07-09T18:10:29Z","references":["https://osv.dev/vulnerability/GHSA-qr9h-j6xg-2j72","https://github.com/QwikDev/qwik/security/advisories/GHSA-qr9h-j6xg-2j72","https://nvd.nist.gov/vuln/detail/CVE-2025-53620","https://github.com/QwikDev/qwik/pull/7342","https://github.com/QwikDev/qwik","https://github.com/QwikDev/qwik/releases/tag/%40builder.io%2Fqwik%401.13.0"],"severity":{"label":"critical","score":9.2},"sources":[{"source":"osv","source_id":"GHSA-qr9h-j6xg-2j72","url":"https://osv.dev/vulnerability/GHSA-qr9h-j6xg-2j72"},{"source":"nvd","source_id":"CVE-2025-53620","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-53620"}],"summary":"Qwik's unhandled exception vulnerabilty can cause server crashes from malicious requests"}