CVE-2026-106109 | quasarframework app-vite up to 3.2.x @quasar/app-vite symlink

October 6, 2026 Yanac

A vulnerability marked as problematic has been reported in quasarframework app-vite up to 3.2.x. Affected is an unknown function of the component @quasar/app-vite. Performing a manipulation results in symlink following.

This vulnerability is cataloged as CVE-2026-106109. The attack must be initiated from a local position. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More