{"action":"Upgrade @quasar/icongenie to 6.1.1 or later.","affected":[{"fixed":"6.1.1","introduced":"0"}],"component":"@quasar/icongenie","cve_ids":["CVE-2026-106103"],"ecosystem":"npm","epss":0.00285,"exploited":false,"fixed_versions":["6.1.1"],"ghsa_id":"GHSA-wmpw-j6qv-mw88","id":"tcs_01M5KGFF5K7E5JQ2X3G1SXM70Q","modified_at":"2026-10-07T16:30:04.720529512Z","published_at":"2026-10-07T16:14:14Z","references":["https://osv.dev/vulnerability/GHSA-wmpw-j6qv-mw88","https://github.com/quasarframework/quasar/security/advisories/GHSA-wmpw-j6qv-mw88","https://nvd.nist.gov/vuln/detail/CVE-2026-106103","https://github.com/quasarframework/quasar/commit/87c89a80ec84f1eb7dbe258e5367161b0598ceb3","https://github.com/quasarframework/quasar","https://github.com/quasarframework/quasar/releases/tag/@quasar/icongenie-v6.1.1"],"severity":{"label":"high","score":7.1},"sources":[{"source":"osv","source_id":"GHSA-wmpw-j6qv-mw88","url":"https://osv.dev/vulnerability/GHSA-wmpw-j6qv-mw88"}],"summary":"Quasar Framework: Path Traversal / Arbitrary File Write via crafted Icon Genie profile"}