CVE-2026-106101 | Quasar Framework up to 2.32.1 OpenURL Utility open-url.js openURL cross site scripting

October 6, 2026 Yanac

A vulnerability was found in Quasar Framework Quasar up to 2.32.1. It has been declared as problematic. Impacted is the function openURL of the file ui/src/utils/open-url/open-url.js of the component OpenURL Utility. Executing a manipulation can lead to cross site scripting.

The identification of this vulnerability is CVE-2026-106101. The attack may be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More