{"schema":"vulnpedia.research/1","cve":"CVE-2026-106108","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/quasarframework/quasar/security/advisories/GHSA-vhhq-m2gm-rwc9","tags":["x_refsource_CONFIRM","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-13T14:55:50.358Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-13T14:55:50.358Z","url":"https://github.com/quasarframework/quasar/security/advisories/GHSA-vhhq-m2gm-rwc9"},{"source":"nvd","sourceId":"CVE-2026-106108","modified":"2026-10-16T20:04:29.760","url":"https://github.com/quasarframework/quasar/security/advisories/GHSA-vhhq-m2gm-rwc9"},{"source":"ghsa","sourceId":"GHSA-vhhq-m2gm-rwc9","url":"https://github.com/quasarframework/quasar/security/advisories/GHSA-vhhq-m2gm-rwc9"},{"source":"ghsa","sourceId":"GHSA-vhhq-m2gm-rwc9","modified":"2026-10-07T16:30:05.303020020Z","url":"https://github.com/quasarframework/quasar/security/advisories/GHSA-vhhq-m2gm-rwc9"}]},{"url":"https://github.com/quasarframework/quasar/commit/cdd4daeec839215540221122763c7a17cd478abc","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-13T14:55:50.358Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-13T14:55:50.358Z","url":"https://github.com/quasarframework/quasar/commit/cdd4daeec839215540221122763c7a17cd478abc"},{"source":"nvd","sourceId":"CVE-2026-106108","modified":"2026-10-16T20:04:29.760","url":"https://github.com/quasarframework/quasar/commit/cdd4daeec839215540221122763c7a17cd478abc"},{"source":"ghsa","sourceId":"GHSA-vhhq-m2gm-rwc9","url":"https://github.com/quasarframework/quasar/commit/cdd4daeec839215540221122763c7a17cd478abc"},{"source":"ghsa","sourceId":"GHSA-vhhq-m2gm-rwc9","modified":"2026-10-07T16:30:05.303020020Z","url":"https://github.com/quasarframework/quasar/commit/cdd4daeec839215540221122763c7a17cd478abc"}]},{"url":"https://github.com/quasarframework/quasar/releases/tag/@quasar/app-vite-v3.3.0","tags":["x_refsource_MISC"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-13T14:55:50.358Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-13T14:55:50.358Z","url":"https://github.com/quasarframework/quasar/releases/tag/@quasar/app-vite-v3.3.0"},{"source":"nvd","sourceId":"CVE-2026-106108","modified":"2026-10-16T20:04:29.760","url":"https://github.com/quasarframework/quasar/releases/tag/@quasar/app-vite-v3.3.0"}]},{"url":"https://osv.dev/vulnerability/GHSA-vhhq-m2gm-rwc9","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-vhhq-m2gm-rwc9","modified":"2026-10-07T16:30:05.303020020Z","origins":[{"source":"ghsa","sourceId":"GHSA-vhhq-m2gm-rwc9","url":"https://osv.dev/vulnerability/GHSA-vhhq-m2gm-rwc9"},{"source":"ghsa","sourceId":"GHSA-vhhq-m2gm-rwc9","modified":"2026-10-07T16:30:05.303020020Z","url":"https://osv.dev/vulnerability/GHSA-vhhq-m2gm-rwc9"}]},{"url":"https://github.com/quasarframework/quasar","tags":["PACKAGE"],"source":"ghsa","sourceId":"GHSA-vhhq-m2gm-rwc9","modified":"2026-10-07T16:30:05.303020020Z","origins":[{"source":"ghsa","sourceId":"GHSA-vhhq-m2gm-rwc9","url":"https://github.com/quasarframework/quasar"},{"source":"ghsa","sourceId":"GHSA-vhhq-m2gm-rwc9","modified":"2026-10-07T16:30:05.303020020Z","url":"https://github.com/quasarframework/quasar"}]},{"url":"https://github.com/quasarframework/quasar/releases/tag/@quasar/app-vite-v3.1.0","tags":["WEB"],"source":"ghsa","sourceId":"GHSA-vhhq-m2gm-rwc9","modified":"2026-10-07T16:30:05.303020020Z","origins":[{"source":"ghsa","sourceId":"GHSA-vhhq-m2gm-rwc9","url":"https://github.com/quasarframework/quasar/releases/tag/@quasar/app-vite-v3.1.0"},{"source":"ghsa","sourceId":"GHSA-vhhq-m2gm-rwc9","modified":"2026-10-07T16:30:05.303020020Z","url":"https://github.com/quasarframework/quasar/releases/tag/@quasar/app-vite-v3.1.0"}]},{"source":"euvd","sourceId":"EUVD-2026-98736","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-98736","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-98736","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-98736"}]}],"packages":[{"source":"ghsa","sourceId":"GHSA-vhhq-m2gm-rwc9","url":"https://osv.dev/vulnerability/GHSA-vhhq-m2gm-rwc9","ecosystem":"npm","name":"@quasar/app-vite","purl":"pkg:npm/%40quasar/app-vite","ranges":[{"type":"SEMVER","events":[{"introduced":"3.1.0"},{"fixed":"3.3.0"}]}],"databaseSpecific":{"last_known_affected_version_range":"<= 3.2.0","source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-vhhq-m2gm-rwc9/GHSA-vhhq-m2gm-rwc9.json"},"modified":"2026-10-07T16:30:05.303020020Z","origins":[{"source":"ghsa","sourceId":"GHSA-vhhq-m2gm-rwc9","modified":"2026-10-07T16:30:05.303020020Z","url":"https://osv.dev/vulnerability/GHSA-vhhq-m2gm-rwc9"}]}],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[]}