Homepage

@builder.io/qwik-city@1.19.1

The meta-framework for Qwik.

  • latest version

    1.19.2

  • latest non vulnerable version

    1.19.2

  • first published

    3 years ago

  • latest version published

    1 months ago

  • licenses detected

  • View qwik-city package health on Snyk  (opens in a new tab)
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the @builder.io/qwik-city package. This does not include vulnerabilities belonging to this package’s dependencies.

    Fix vulnerabilities automatically

    Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

    Fix for free
    VulnerabilityVulnerable Version
    • H
    Access of Resource Using Incompatible Type ('Type Confusion')

    @builder.io/qwik-city is a The meta-framework for Qwik.

    Affected versions of this package are vulnerable to Access of Resource Using Incompatible Type ('Type Confusion') in the FormData function when handling application/x-www-form-urlencoded or multipart/form-data requests. An attacker can cause server-side values to be altered in unexpected ways by submitting crafted form field names that mix array indices and object-property keys for the same path. This can result in runtime errors, increased server resource consumption, or type confusion in downstream code by manipulating the structure of parsed input.

    How to fix Access of Resource Using Incompatible Type ('Type Confusion')?

    Upgrade @builder.io/qwik-city to version 1.19.2 or higher.

    <1.19.2
    Go back to all versions of this package