CVE-2026-106104 | quasarframework Quasar up to 2.23.2 SSR Parsing Platform.js Platform.parseSSR User-Agent infinite loop

October 6, 2026 Yanac

A vulnerability was found in quasarframework Quasar up to 2.23.2. It has been classified as problematic. This issue affects the function Platform.parseSSR of the file ui/src/plugins/platform/Platform.js of the component SSR Parsing. Performing a manipulation of the argument User-Agent results in infinite loop.

This vulnerability was named CVE-2026-106104. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More